diff options
| author | Franck Cuny <franck@fcuny.net> | 2023-05-02 19:30:39 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2023-05-02 19:30:39 -0700 |
| commit | b6d6b6f366c3cbf7e7340f08ea8877bf0a8d45e7 (patch) | |
| tree | c45c1011b194c0982ba82c5f2f06d18941a916ca /profiles/server.nix | |
| parent | profiles/default: move stuff related to boot (diff) | |
| download | infra-b6d6b6f366c3cbf7e7340f08ea8877bf0a8d45e7.tar.gz | |
profiles: consolidates common networking bits
This remove ssh on workstations. I also drop mosh since I don't use it.
Diffstat (limited to 'profiles/server.nix')
| -rw-r--r-- | profiles/server.nix | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/profiles/server.nix b/profiles/server.nix index 5a95dff..731ebe8 100644 --- a/profiles/server.nix +++ b/profiles/server.nix @@ -2,6 +2,7 @@ { imports = [ ./default.nix + ./tailscale.nix ]; powerManagement.cpuFreqGovernor = "schedutil"; @@ -12,4 +13,12 @@ packages = with pkgs; [ terminus_font ]; keyMap = "us"; }; + + services.openssh = { + enable = true; + permitRootLogin = "yes"; + passwordAuthentication = false; + }; + + networking.firewall.allowedTCPPorts = [ 22 ]; } |