added for vps

2025-10-28 05:47:59 -06:00 · 2025-10-28 05:47:59 -06:00 · ffbf9e08f2
commit ffbf9e08f2
parent 15d0cb574b
9 changed files with 314 additions and 21 deletions
--- a/hosts/server/security.nix
+++ b/hosts/server/security.nix
@ -0,0 +1,28 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  services.openssh = {
+    enable = true;
+    ports = [8123];
+    settings = {
+      PermitRootLogin = "prohibit-password";
+      PasswordAuthentication = false;
+    };
+  };
+
+  users.users.root.openssh.authorizedKeys.keyFiles = [
+    ../../.secrets/id_ed25519.pub
+  ];
+
+  users.users.admin = {
+    isNormalUser = true;
+    extraGroups = ["wheel" "docker"];
+    openssh.authorizedKeys.keyFiles = [
+      ../../.secrets/id_ed25519.pub
+    ];
+  };
+
+  security.sudo.wheelNeedsPassword = false;
+}