nix-dotfiles/nixos_modules/remote-deploy.nix

13 lines
369 B
Nix

{ lib, ... }: {
services.openssh = {
enable = true;
openFirewall = true;
permitRootLogin = lib.mkDefault "prohibit-password";
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
};
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKp1Rfb2acLM/5TDUahu+AdV/HVw+hoOTdQIeQIjV5p8"
];
}