infra/libkookie/configuration/server/openssh/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

{ config, ... }:

{
  services.openssh = {
    enable = true;
    permitRootLogin = "prohibit-password";
    passwordAuthentication = false;

    # Required for root
    extraConfig = ''
      Match Address 127.0.0.1
        PermitRootLogin yes
    '';
  };

  # Also enable mosh because /shrug
  programs.mosh.enable = true;
}