diff options
Diffstat (limited to 'modules/services/nixos/ssh.nix')
| -rw-r--r-- | modules/services/nixos/ssh.nix | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/modules/services/nixos/ssh.nix b/modules/services/nixos/ssh.nix index cfe7883..7868a31 100644 --- a/modules/services/nixos/ssh.nix +++ b/modules/services/nixos/ssh.nix @@ -8,7 +8,6 @@ in { config = lib.mkIf cfg.enable { services.openssh = { enable = true; - openFirewall = false; hostKeys = [ { path = "/etc/ssh/ssh_host_ed25519_key"; @@ -24,9 +23,15 @@ in { ]; settings = { - PermitRootLogin = "prohibit-password"; + PermitRootLogin = "prohibit-password"; # deploy-rs uses root account PasswordAuthentication = false; }; + + knownHosts = { + "mercury".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIQtMAgPdWwrOzlZT/lEIRQZ+ajhafG9AEJCrF2/bsmN"; + "jupiter".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPB7feUHl5qoD5zF9AMOV2meViA+wZYdVvbVjPkggZf8"; + "ganymede".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINlr+53UmlGVP1blkdNl6NFqn1w2umFJyjH1EVUPKIy9"; + }; }; systemd.services."openssh" = lib.mkIf config.collinux.services.networking.networkd.enable { |