2023-09-16 12:14:53 +02:00
|
|
|
{ config, pkgs, ... }:
|
|
|
|
|
|
|
|
|
|
{
|
|
|
|
|
# Enable SSH server.
|
|
|
|
|
services.openssh = {
|
|
|
|
|
enable = true;
|
|
|
|
|
#ports = [ 22 ];
|
|
|
|
|
# Use authorized keys only.
|
|
|
|
|
settings.PasswordAuthentication = false;
|
2023-09-17 15:34:38 +02:00
|
|
|
# Forbid/Limit root login through SSH.
|
|
|
|
|
#settings.PermitRootLogin = "no";
|
2023-09-17 16:36:30 +02:00
|
|
|
settings.PermitRootLogin = "prohibit-password";
|
2023-09-17 15:34:38 +02:00
|
|
|
# Enabling this is required for commands such as sftp and sshfs.
|
|
|
|
|
allowSFTP = false;
|
2023-09-16 12:14:53 +02:00
|
|
|
};
|
|
|
|
|
|
|
|
|
|
# SSH public key(s) allowed to connect via SSH.
|
|
|
|
|
users.users.yoda = {
|
|
|
|
|
openssh.authorizedKeys.keys = [
|
|
|
|
|
"ssh-rsa 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 openpgp:0xA8B75370"
|
|
|
|
|
];
|
|
|
|
|
};
|
|
|
|
|
}
|
