SelfPrivacy/selfprivacy-nixos-config
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git synced 2024-11-22 03:41:26 +00:00
Code Issues Projects Releases Wiki Activity

Add more SSH settings

Browse source
This commit is contained in:
Inex Code 2021-11-15 16:35:04 +03:00
parent 05627a1dc9
commit 7193030b37
4 changed files with 42 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -45,9 +45,13 @@ Example JSON config:
},
"timezone": "Europe/Moscow",
"resticPassword": "PASS",
"ssh": {
"enable": true,
"rootSshKeys": [
"ssh-ed25519 KEY user@host"
],
"passwordAuthentication": true
},
"username": "owner",
"users": [
{

6
configuration.nix
View file

@ -37,10 +37,10 @@
};
time.timeZone = config.services.userdata.timezone;
i18n.defaultLocale = "en_GB.UTF-8";
users.users.root.openssh.authorizedKeys.keys = config.services.userdata.rootSshKeys;
users.users.root.openssh.authorizedKeys.keys = config.services.userdata.ssh.rootKeys;
services.openssh = {
enable = true;
passwordAuthentication = true;
enable = config.services.userdata.ssh.enable;
passwordAuthentication = config.services.userdata.ssh.passwordAuthentication;
permitRootLogin = "yes";
openFirewall = false;
};

13
userdata/schema.json
View file

@ -103,12 +103,23 @@
"resticPassword": {
"type": "string"
},
"rootSshKeys": {
"ssh": {
"type": "object",
"properties": {
"enable": {
"type": "boolean"
},
"rootKeys": {
"type": "array",
"items": {
"type": "string"
}
},
"passwordAuthentication": {
"type": "boolean"
}
}
},
"users": {
"type": "array",
"items": {

15
variables-module.nix
View file

@ -117,12 +117,25 @@ in
'';
type = types.nullOr types.string;
};
rootSshKeys = mkOption {
ssh = {
enable = mkOption {
default = true;
type = types.nullOr types.bool;
};
rootKeys = mkOption {
description = ''
Root SSH Keys
'';
type = types.nullOr (types.listOf types.string);
};
passwordAuthentication = mkOption {
description = ''
Password authentication for SSH
'';
default = true;
type = types.nullOr types.bool;
};
};
timezone = mkOption {
description = ''
Timezone used by the server