lgmrszd/nix-cfg
1
0
Fork 0
mirror of https://git.lgmrszd.xyz/Lgmrszd/nix-cfg.git synced 2025-12-14 23:58:20 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

vps1: move ssh config to a submodule, enable agent

Browse source
This commit is contained in:
Lgmrszd 2024-06-12 02:03:07 +03:00
parent 4d4f1b6464
commit 9475288da7
No known key found for this signature in database
GPG key ID: 9396B8BA6FBB14DE
2 changed files with 30 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

28
hosts/vps1/config/ssh.nix Normal file
View file

@ -0,0 +1,28 @@
{ pkgs, config, data, ... }:
let
gitSSHPort = data.services.git.sshPort;
in
{
services.openssh = {
enable = true;
ports = [ (if data ? sshPort then data.sshPort else 37163) gitSSHPort ];
settings.PermitRootLogin = "no";
settings.PasswordAuthentication = false;
extraConfig = ''
Match LocalPort ${toString gitSSHPort}
AllowUsers forgejo
'';
};
programs.ssh.startAgent = true;
services.endlessh-go = {
enable = true;
openFirewall = true;
port = 22;
};
users.users.lgm.openssh.authorizedKeys.keys = [
''sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIHFPA2RhqZIVCLwYuEUDQyOnJ4g1R6IfQyhGqZ2Cvvu+AAAABHNzaDo= lgm@lgm-nixos''
''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHUawqrjSPXTwQ4ZY2rw9o+XgmK7TbH0QEIXQPh8gT0J lgm@lgm-nixos''
];
}