probably broken

2025-12-31 12:24:43 -06:00
parent 0c1f0a4639
commit d8058560b1
158 changed files with 1198 additions and 423 deletions
--- a/system/services/openssh/default.nix
+++ b/system/services/openssh/default.nix
@@ -0,0 +1,22 @@
+{ config, lib, ... }: {
+
+    options = {
+        sysconfig.services.openssh.enable = lib.options.mkOption {
+            type = lib.types.bool;
+            default = false;
+        };
+    };
+
+    config = lib.mkIf (config.sysconfig.services.openssh.enable || config.sysconfig.remoteBuildHost) {
+
+        services.openssh = {
+            enable = true;
+            openFirewall = true;
+            settings = {
+                PermitRootLogin = lib.mkForce "no";
+                PasswordAuthentication = false;
+                KbdInteractiveAuthentication = false;
+            };
+        };
+    };
+}