Add more SSH settings

README.md

@@ -45,9 +45,13 @@ Example JSON config:
     },
     "timezone": "Europe/Moscow",
     "resticPassword": "PASS",
-    "rootSshKeys": [
+    "ssh": {
-        "ssh-ed25519 KEY user@host"
+        "enable": true,
-    ],
+        "rootSshKeys": [
+            "ssh-ed25519 KEY user@host"
+        ],
+        "passwordAuthentication": true
+    },
     "username": "owner",
     "users": [
         {

configuration.nix

@@ -37,10 +37,10 @@
   };
   time.timeZone = config.services.userdata.timezone;
   i18n.defaultLocale = "en_GB.UTF-8";
-  users.users.root.openssh.authorizedKeys.keys = config.services.userdata.rootSshKeys;
+  users.users.root.openssh.authorizedKeys.keys = config.services.userdata.ssh.rootKeys;
   services.openssh = {
-    enable = true;
+    enable = config.services.userdata.ssh.enable;
-    passwordAuthentication = true;
+    passwordAuthentication = config.services.userdata.ssh.passwordAuthentication;
     permitRootLogin = "yes";
     openFirewall = false;
   };

userdata/schema.json

@@ -103,10 +103,21 @@
         "resticPassword": {
             "type": "string"
         },
-        "rootSshKeys": {
+        "ssh": {
-            "type": "array",
+            "type": "object",
-            "items": {
+            "properties": {
-                "type": "string"
+                "enable": {
+                    "type": "boolean"
+                },
+                "rootKeys": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "passwordAuthentication": {
+                    "type": "boolean"
+                }
             }
         },
         "users": {

variables-module.nix

@@ -117,11 +117,24 @@ in
       '';
       type = types.nullOr types.string;
     };
-    rootSshKeys = mkOption {
+    ssh = {
-      description = ''
+      enable = mkOption {
+        default = true;
+        type = types.nullOr types.bool;
+      };
+      rootKeys = mkOption {
+        description = ''
         Root SSH Keys
-      '';
+        '';
-      type = types.nullOr (types.listOf types.string);
+        type = types.nullOr (types.listOf types.string);
+      };
+      passwordAuthentication = mkOption {
+        description = ''
+          Password authentication for SSH
+        '';
+        default = true;
+        type = types.nullOr types.bool;
+      };
     };
     timezone = mkOption {
       description = ''