self-hosting/modules/openssh.nix
Paul-Henri Froidmont da51a4997b
Update ssh keys
2025-09-25 18:44:04 +02:00

21 lines
526 B
Nix

{ config, lib, ... }:
with lib;
let
cfg = config.custom.services.openssh;
in
{
options.custom.services.openssh = {
enable = mkEnableOption "openssh";
};
config = mkIf cfg.enable {
services.openssh.enable = true;
services.openssh.settings.PermitRootLogin = "prohibit-password";
users.users.root.openssh.authorizedKeys.keyFiles = [
../ssh_keys/froidmpa-desktop.pub
../ssh_keys/froidmpa-laptop.pub
../ssh_keys/phfroidmont-stellaris.pub
../ssh_keys/elios-desktop.pub
];
};
}