unexplrd/nixos-blueprint
2
2
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

hosts/dunamis: move nix.sshServe to misc

Browse Source 
Signed-off-by: unexplrd <unexplrd@linerds.us>
This commit is contained in:
unexplrd
2025-06-06 15:06:31 +03:00
parent a5a2e9ceac
commit 854a3be744
3 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
hosts/dunamis/configuration.nix
View File

@ -45,16 +45,4 @@
opentabletdriver.enable = false; opentabletdriver.enable = false;
qmk-vial.enable = true; qmk-vial.enable = true;
virtual.libvirt.enable = true; virtual.libvirt.enable = true;
nix = let
inherit (builtins) readFile;
inherit (config.users.users) user;
in {
settings.trusted-users = ["nix-ssh"];
sshServe = {
enable = true;
write = true;
keys = map (f: readFile f) user.openssh.authorizedKeys.keyFiles;
};
};
} }

1
hosts/dunamis/misc/default.nix
View File

@ -1,5 +1,6 @@
{ {
imports = [ imports = [
# ./minecraft.nix # ./minecraft.nix
./nix-ssh-serve.nix
]; ];
} }

15
hosts/dunamis/misc/nix-ssh-serve.nix Normal file
View File

@ -0,0 +1,15 @@
{config, ...}: {
nix = let
inherit (builtins) readFile;
inherit (config.users.users) user;
in {
sshServe = {
enable = true;
keys = map (f: readFile f) user.openssh.authorizedKeys.keyFiles;
# protocol = "ssh-ng";
trusted = true;
write = true;
};
};
security.pam.enableSSHAgentAuth = true;
}