This commit is contained in:
TheWanderingCrow 2025-05-25 21:12:43 -04:00
parent ca918f2a12
commit 2091fb1fdc
2 changed files with 36 additions and 0 deletions

View file

@ -0,0 +1,17 @@
{
pkgs,
lib,
inputs,
config,
...
}: let
sopsFolder = builtins.toString inputs.nix-secrets + "/sops";
in {
sops = {
defaultSopsFile = "${sopsFolder}/${config.hostSpec.hostName}.yaml";
validateSopsFiles = false;
age = {
sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
};
};
}

19
hosts/common/core/ssh.nix Normal file
View file

@ -0,0 +1,19 @@
{
inputs,
config,
lib,
pkgs,
...
}: {
programs.ssh = {
startAgent = true;
};
services.openssh = {
enable = true;
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
};
};
}