nix-dotfiles/hosts/server/security.nix
alsaiduq-lab d96c914844 updates
seems to be the method to nixify a vps on my vps.
2026-01-02 19:12:50 -07:00

25 lines
667 B
Nix

{
config,
pkgs,
...
}: {
services.openssh = {
enable = true;
ports = [8123];
settings = {
PermitRootLogin = "prohibit-password";
PasswordAuthentication = false;
};
};
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK29z1CTXF77ykGyklPM8X3SxeMYM7zHyoIDGi2C9/HU riiidge.racer@gmail.com"
];
users.users.alteur = {
isNormalUser = true;
extraGroups = ["wheel" "docker"];
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK29z1CTXF77ykGyklPM8X3SxeMYM7zHyoIDGi2C9/HU riiidge.racer@gmail.com"
];
};
security.sudo.wheelNeedsPassword = false;
}