diff options
| author | Alexander Kassouni <alex@kassouni.net> | 2026-09-25 22:40:15 -0700 |
|---|---|---|
| committer | Alexander Kassouni <alex@kassouni.net> | 2026-09-25 22:40:15 -0700 |
| commit | 505db4048338db9a5115526054b79e20fde7b25a (patch) | |
| tree | aa9d23918cb416e6afcd98e46635eda22fe9a2a5 /configuration.nix | |
| parent | 1fecb146a94823abc6738bfee1551b062c5d7d3b (diff) | |
options, git
Diffstat (limited to 'configuration.nix')
| -rw-r--r-- | configuration.nix | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/configuration.nix b/configuration.nix index 8335278..dfdbb64 100644 --- a/configuration.nix +++ b/configuration.nix @@ -2,6 +2,8 @@ imports = [ ./hardware-configuration.nix ./minecraft.nix + ./options.nix + ./git.nix ]; boot.loader.systemd-boot.enable = true; boot.loader.efi.canTouchEfiVariables = true; @@ -12,10 +14,11 @@ services.openssh = { enable = true; + authorizedKeysInHomedir = false; # trust only /etc/ssh/authorized_keys.d/%u settings = { PasswordAuthentication = false; PermitRootLogin = "no"; - AllowUsers = [ "kassouni" ]; + AllowUsers = [ "kassouni" "git" ]; KbdInteractiveAuthentication = false; PubkeyAuthentication = true; }; @@ -24,9 +27,7 @@ users.users.kassouni = { extraGroups = [ "wheel" ]; isNormalUser = true; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGBmhTnNG0ym84RJzbIcDCwGmPFVaFPkSYiUtNQrrnV6" - ]; + openssh.authorizedKeys.keys = config.my.adminKeys; }; system.stateVersion = "26.05"; |
