work on agenix

4 files changed, 20 insertions, 1 deletions

diff --git a/modules/desktop/nixos/gnome.nix b/modules/desktop/nixos/gnome.nix
index c88a809..216f312 100644
--- a/modules/desktop/nixos/gnome.nix
+++ b/modules/desktop/nixos/gnome.nix
@@ -59,7 +59,7 @@ in
       gnome-software
     ];
 
-    hjem.users."${config.collinux.user.name}".packages = with pkgs.gnomeExtensions; [blur-my-shell dash-to-dock];
+    hjem.users."${config.collinux.user.name}".packages = with pkgs.gnomeExtensions; [blur-my-shell dash-to-dock] ++ [pkgs.wl-clipboard];
 
     programs.dconf = {
       enable = true;
diff --git a/modules/services/nixos/default.nix b/modules/services/nixos/default.nix
index d177b88..9c95180 100644
--- a/modules/services/nixos/default.nix
+++ b/modules/services/nixos/default.nix
@@ -5,5 +5,6 @@
     ./bluetooth.nix
     ./tailscale.nix
     ./selfhost
+    ./ssh.nix
   ];
 }
diff --git a/modules/services/nixos/ssh.nix b/modules/services/nixos/ssh.nix
new file mode 100644
index 0000000..6db41bf
--- /dev/null
+++ b/modules/services/nixos/ssh.nix
@@ -0,0 +1,17 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.collinux.services.networking.sshd;
+in
+  lib.mkIf cfg.enable {
+    services.openssh = {
+      enable = true;
+      settings = {
+        PermitRootLogin = "no";
+        PasswordAuthentication = false;
+      };
+    };
+  }
diff --git a/modules/services/nixos/tailscale.nix b/modules/services/nixos/tailscale.nix
index 7b6cf08..f60e48e 100644
--- a/modules/services/nixos/tailscale.nix
+++ b/modules/services/nixos/tailscale.nix
@@ -10,6 +10,7 @@ in
     services.tailscale = {
       enable = true;
       useRoutingFeatures = "both";
+      extraSetFlags = ["--ssh=true"];
     };
     networking.firewall = {
       checkReversePath = "loose";