refactor(ssh): system-level ssh known_hosts & ssh config

This commit is contained in:
Ryan Yin
2025-05-16 00:28:40 +08:00
parent b44d277072
commit 26384a73ed
3 changed files with 4 additions and 11 deletions

View File

@@ -85,6 +85,8 @@
openssh.authorizedKeys.keys = myvars.mainSshAuthorizedKeys;
};
programs.ssh = myvars.networking.ssh;
nix.settings = {
# enable flakes globally
experimental-features = ["nix-command" "flakes"];

View File

@@ -1,5 +1,3 @@
{myvars, ...}: {
{
services.openssh.enable = false;
programs.ssh = myvars.networking.ssh;
}

View File

@@ -1,15 +1,8 @@
{
lib,
myvars,
...
}: {
{lib, ...}: {
# networking.firewall.allowedTCPPorts = [ ... ];
# networking.firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether.
networking.firewall.enable = lib.mkDefault false;
programs.ssh = myvars.networking.ssh;
# Enable the OpenSSH daemon.
services.openssh = {
enable = true;