starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-04-25 02:08:29 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

refactor(ssh): system-level ssh known_hosts & ssh config

Browse Source
This commit is contained in:
Ryan Yin
2025-05-16 00:28:40 +08:00
parent b44d277072
commit 26384a73ed
3 changed files with 4 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/base.nix
View File

@@ -85,6 +85,8 @@
openssh.authorizedKeys.keys = myvars.mainSshAuthorizedKeys; openssh.authorizedKeys.keys = myvars.mainSshAuthorizedKeys;
}; };
programs.ssh = myvars.networking.ssh;
nix.settings = { nix.settings = {
# enable flakes globally # enable flakes globally
experimental-features = ["nix-command" "flakes"]; experimental-features = ["nix-command" "flakes"];

4
modules/darwin/ssh.nix
View File

@@ -1,5 +1,3 @@
{myvars, ...}: { {
services.openssh.enable = false; services.openssh.enable = false;
programs.ssh = myvars.networking.ssh;
} }

9
modules/nixos/base/ssh.nix
View File

@@ -1,15 +1,8 @@
{ {lib, ...}: {
lib,
myvars,
...
}: {
# networking.firewall.allowedTCPPorts = [ ... ]; # networking.firewall.allowedTCPPorts = [ ... ];
# networking.firewall.allowedUDPPorts = [ ... ]; # networking.firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether. # Or disable the firewall altogether.
networking.firewall.enable = lib.mkDefault false; networking.firewall.enable = lib.mkDefault false;
programs.ssh = myvars.networking.ssh;
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh = { services.openssh = {
enable = true; enable = true;