diff options
| author | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2026-01-23 17:28:19 -0600 |
|---|---|---|
| committer | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2026-01-23 17:28:19 -0600 |
| commit | 1efe7e2d15e2b10029d7893a63f142892a791e65 (patch) | |
| tree | 8984ad031e639b53d1154281ef8a340b3c69023d /modules/services/nixos/ssh.nix | |
| parent | 3d9b20723ab8b5d61d8db540c34d18c59bf13fa5 (diff) | |
ssh
Diffstat (limited to 'modules/services/nixos/ssh.nix')
| -rw-r--r-- | modules/services/nixos/ssh.nix | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/modules/services/nixos/ssh.nix b/modules/services/nixos/ssh.nix index cfe7883..7868a31 100644 --- a/modules/services/nixos/ssh.nix +++ b/modules/services/nixos/ssh.nix @@ -8,7 +8,6 @@ in { config = lib.mkIf cfg.enable { services.openssh = { enable = true; - openFirewall = false; hostKeys = [ { path = "/etc/ssh/ssh_host_ed25519_key"; @@ -24,9 +23,15 @@ in { ]; settings = { - PermitRootLogin = "prohibit-password"; + PermitRootLogin = "prohibit-password"; # deploy-rs uses root account PasswordAuthentication = false; }; + + knownHosts = { + "mercury".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIQtMAgPdWwrOzlZT/lEIRQZ+ajhafG9AEJCrF2/bsmN"; + "jupiter".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPB7feUHl5qoD5zF9AMOV2meViA+wZYdVvbVjPkggZf8"; + "ganymede".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINlr+53UmlGVP1blkdNl6NFqn1w2umFJyjH1EVUPKIy9"; + }; }; systemd.services."openssh" = lib.mkIf config.collinux.services.networking.networkd.enable { |