hosts/dunamis: move nix.sshServe to misc
Signed-off-by: unexplrd <unexplrd@linerds.us>
This commit is contained in:
@ -45,16 +45,4 @@
|
||||
opentabletdriver.enable = false;
|
||||
qmk-vial.enable = true;
|
||||
virtual.libvirt.enable = true;
|
||||
|
||||
nix = let
|
||||
inherit (builtins) readFile;
|
||||
inherit (config.users.users) user;
|
||||
in {
|
||||
settings.trusted-users = ["nix-ssh"];
|
||||
sshServe = {
|
||||
enable = true;
|
||||
write = true;
|
||||
keys = map (f: readFile f) user.openssh.authorizedKeys.keyFiles;
|
||||
};
|
||||
};
|
||||
}
|
||||
|
@ -1,5 +1,6 @@
|
||||
{
|
||||
imports = [
|
||||
# ./minecraft.nix
|
||||
./nix-ssh-serve.nix
|
||||
];
|
||||
}
|
||||
|
15
hosts/dunamis/misc/nix-ssh-serve.nix
Normal file
15
hosts/dunamis/misc/nix-ssh-serve.nix
Normal file
@ -0,0 +1,15 @@
|
||||
{config, ...}: {
|
||||
nix = let
|
||||
inherit (builtins) readFile;
|
||||
inherit (config.users.users) user;
|
||||
in {
|
||||
sshServe = {
|
||||
enable = true;
|
||||
keys = map (f: readFile f) user.openssh.authorizedKeys.keyFiles;
|
||||
# protocol = "ssh-ng";
|
||||
trusted = true;
|
||||
write = true;
|
||||
};
|
||||
};
|
||||
security.pam.enableSSHAgentAuth = true;
|
||||
}
|
Reference in New Issue
Block a user