bertof/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Better deployment keys separation

Browse source
This commit is contained in:
Filippo Berto 2023-01-12 12:21:31 +01:00
parent 9b026f8a05
commit 2a46d9d455
No known key found for this signature in database
GPG key ID: FE98AE5EC52B1056
7 changed files with 46 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nixos_modules/remote-deploy.nix
View file

@ -1,12 +1,13 @@
{ config, ... }: {
{
services.openssh = {
enable = true;
openFirewall = true;
permitRootLogin = "prohibit-password";
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
};
users.users.root.openssh.authorizedKeys.keys = config.users.users.bertof.openssh.authorizedKeys.keys or [ ];
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKp1Rfb2acLM/5TDUahu+AdV/HVw+hoOTdQIeQIjV5p8"
];
}