nix

2026-02-11 17:15:39 +02:00
parent e4a4329100
commit 4c5ac20b4f
4 changed files with 86 additions and 37 deletions
--- a/hosts/server/configuration.nix
+++ b/hosts/server/configuration.nix
@@ -12,6 +12,7 @@
    ./modules/tangled.nix
    ../../modules/force.nix
    ./modules/gitea.nix
+    ./modules/vaultwarden.nix
  ];

  # gcc. shit breaks. wtf
@@ -40,9 +41,11 @@
    };
  };

-  services.openssh.settings = {
+  services.openssh.settings = lib.mkDefault {
    PubkeyAuthentication = "yes";
    TrustedUserCAKeys = "/etc/ssh/ca.pub";
+    PermitRootLogin = lib.mkDefault "prohibit-password";
+    KbdInteractiveAuthentication = lib.mkDefault false;
  };

  services.openssh = {
@@ -62,6 +65,7 @@
    extraGroups = [
      "wheel"
      "networkmanager"
+      "docker"
    ];
    shell = pkgs.zsh;
  };