john/dendritic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

started SSH certs

Browse Source
This commit is contained in:
John Lancaster
2026-03-12 13:22:40 -05:00
parent 3bbe6d359e
commit 026f413e7b
4 changed files with 33 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
modules/services/ssh.nix
View File

@@ -3,17 +3,26 @@ let
userName = "john";
in
{
flake.modules.nixos.ssh = {
services.openssh = {
enable = true;
# require public key authentication for better security
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
flake.modules.nixos.ssh = { pkgs, config, lib, ... }: {
options = {
ssh.certificates = lib.mkEnableOption "Enable SSH certificates";
};
home-manager.sharedModules = with inputs.self.modules.homeManager; [
ssh
];
config = {
services.openssh = {
enable = true;
# require public key authentication for better security
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
};
programs.ssh.knownHosts = lib.mkIf config.ssh.certificates {
"192.168.1.*" = {
certAuthority = true;
publicKey = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNug18oLH0vZxnibXJzMJvTWFPZTnSlhCDDVi+rHhgnIum6ZXQ4SF+VHOOAM5BbzZmMKitNJ5lcrGP15Eur7DzQ=";
};
};
};
};
flake.modules.homeManager.ssh = { pkgs, config, lib, ... }: