30 lines
628 B
Nix
30 lines
628 B
Nix
{
|
|
config,
|
|
lib,
|
|
...
|
|
}: let
|
|
inherit (lib.modules) mkIf;
|
|
inherit (lib.options) mkEnableOption;
|
|
|
|
cfg = config.sneeuwvlok.services.networking.ssh;
|
|
in {
|
|
options.sneeuwvlok.services.networking.ssh = {
|
|
enable = mkEnableOption "enable ssh";
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
services.openssh = {
|
|
enable = true;
|
|
openFirewall = true;
|
|
ports = [22];
|
|
settings = {
|
|
PasswordAuthentication = true;
|
|
AllowUsers = ["chris" "root"];
|
|
UseDns = true;
|
|
UsePAM = true;
|
|
PermitRootLogin = "prohibit-password";
|
|
PermitEmptyPasswords = "no";
|
|
};
|
|
};
|
|
};
|
|
}
|