1 files changed, 18 insertions, 0 deletions
diff --git a/infra/libkookie/configuration/server/openssh/default.nix b/infra/libkookie/configuration/server/openssh/default.nix
new file mode 100644
index 000000000000..df15b7128b6d
--- /dev/null
+++ b/infra/libkookie/configuration/server/openssh/default.nix
@@ -0,0 +1,18 @@
+{ config, ... }:
+
+{
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "prohibit-password";
+    passwordAuthentication = false;
+
+    # Required for root
+    extraConfig = ''
+      Match Address 127.0.0.1
+        PermitRootLogin yes
+    '';
+  };
+
+  # Also enable mosh because /shrug
+  programs.mosh.enable = true;
+}