work on agenix

3 files changed, 19 insertions, 0 deletions

diff --git a/modules/services/nixos/default.nix b/modules/services/nixos/default.nix
index d177b88..9c95180 100644
--- a/modules/services/nixos/default.nix
+++ b/modules/services/nixos/default.nix
@@ -5,5 +5,6 @@
     ./bluetooth.nix
     ./tailscale.nix
     ./selfhost
+    ./ssh.nix
   ];
 }
diff --git a/modules/services/nixos/ssh.nix b/modules/services/nixos/ssh.nix
new file mode 100644
index 0000000..6db41bf
--- /dev/null
+++ b/modules/services/nixos/ssh.nix
@@ -0,0 +1,17 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.collinux.services.networking.sshd;
+in
+  lib.mkIf cfg.enable {
+    services.openssh = {
+      enable = true;
+      settings = {
+        PermitRootLogin = "no";
+        PasswordAuthentication = false;
+      };
+    };
+  }
diff --git a/modules/services/nixos/tailscale.nix b/modules/services/nixos/tailscale.nix
index 7b6cf08..f60e48e 100644
--- a/modules/services/nixos/tailscale.nix
+++ b/modules/services/nixos/tailscale.nix
@@ -10,6 +10,7 @@ in
     services.tailscale = {
       enable = true;
       useRoutingFeatures = "both";
+      extraSetFlags = ["--ssh=true"];
     };
     networking.firewall = {
       checkReversePath = "loose";