hosts/dunamis: move nix.sshServe to misc

Signed-off-by: unexplrd <unexplrd@linerds.us>
2025-06-06 15:06:31 +03:00
parent a5a2e9ceac
commit 854a3be744
3 changed files with 16 additions and 12 deletions
--- a/hosts/dunamis/misc/nix-ssh-serve.nix
+++ b/hosts/dunamis/misc/nix-ssh-serve.nix
@ -0,0 +1,15 @@
+{config, ...}: {
+  nix = let
+    inherit (builtins) readFile;
+    inherit (config.users.users) user;
+  in {
+    sshServe = {
+      enable = true;
+      keys = map (f: readFile f) user.openssh.authorizedKeys.keyFiles;
+      # protocol = "ssh-ng";
+      trusted = true;
+      write = true;
+    };
+  };
+  security.pam.enableSSHAgentAuth = true;
+}