From 4bbaf8fff29ea4f50771025327cb16ed8995aab7 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Sat, 20 Dec 2025 16:47:15 -0600
Subject: work on agenix

---
 modules/services/nixos/default.nix   |  1 +
 modules/services/nixos/ssh.nix       | 17 +++++++++++++++++
 modules/services/nixos/tailscale.nix |  1 +
 3 files changed, 19 insertions(+)
 create mode 100644 modules/services/nixos/ssh.nix

(limited to 'modules/services')

diff --git a/modules/services/nixos/default.nix b/modules/services/nixos/default.nix
index d177b88..9c95180 100644
--- a/modules/services/nixos/default.nix
+++ b/modules/services/nixos/default.nix
@@ -5,5 +5,6 @@
     ./bluetooth.nix
     ./tailscale.nix
     ./selfhost
+    ./ssh.nix
   ];
 }
diff --git a/modules/services/nixos/ssh.nix b/modules/services/nixos/ssh.nix
new file mode 100644
index 0000000..6db41bf
--- /dev/null
+++ b/modules/services/nixos/ssh.nix
@@ -0,0 +1,17 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.collinux.services.networking.sshd;
+in
+  lib.mkIf cfg.enable {
+    services.openssh = {
+      enable = true;
+      settings = {
+        PermitRootLogin = "no";
+        PasswordAuthentication = false;
+      };
+    };
+  }
diff --git a/modules/services/nixos/tailscale.nix b/modules/services/nixos/tailscale.nix
index 7b6cf08..f60e48e 100644
--- a/modules/services/nixos/tailscale.nix
+++ b/modules/services/nixos/tailscale.nix
@@ -10,6 +10,7 @@ in
     services.tailscale = {
       enable = true;
       useRoutingFeatures = "both";
+      extraSetFlags = ["--ssh=true"];
     };
     networking.firewall = {
       checkReversePath = "loose";
-- 
cgit v1.3.1