summaryrefslogtreecommitdiff
path: root/configuration.nix
diff options
context:
space:
mode:
Diffstat (limited to 'configuration.nix')
-rw-r--r--configuration.nix9
1 files changed, 5 insertions, 4 deletions
diff --git a/configuration.nix b/configuration.nix
index 8335278..dfdbb64 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -2,6 +2,8 @@
imports = [
./hardware-configuration.nix
./minecraft.nix
+ ./options.nix
+ ./git.nix
];
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
@@ -12,10 +14,11 @@
services.openssh = {
enable = true;
+ authorizedKeysInHomedir = false; # trust only /etc/ssh/authorized_keys.d/%u
settings = {
PasswordAuthentication = false;
PermitRootLogin = "no";
- AllowUsers = [ "kassouni" ];
+ AllowUsers = [ "kassouni" "git" ];
KbdInteractiveAuthentication = false;
PubkeyAuthentication = true;
};
@@ -24,9 +27,7 @@
users.users.kassouni = {
extraGroups = [ "wheel" ];
isNormalUser = true;
- openssh.authorizedKeys.keys = [
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGBmhTnNG0ym84RJzbIcDCwGmPFVaFPkSYiUtNQrrnV6"
- ];
+ openssh.authorizedKeys.keys = config.my.adminKeys;
};
system.stateVersion = "26.05";