38 lines
914 B
Nix
38 lines
914 B
Nix
|
{
|
||
|
|
flake.modules.nixos.ssh = {
|
||
|
|
lib,
|
||
|
|
config,
|
||
|
|
...
|
||
|
|
}:
|
||
|
|
with lib; let
|
||
|
|
cfg = config.mySystem.services.ssh;
|
||
|
|
in {
|
||
|
|
options.mySystem.services.ssh = {
|
||
|
|
enable = mkEnableOption "Enables OpenSSH";
|
||
|
|
allowedUsers = mkOption {
|
||
|
|
type = types.listOf types.str;
|
||
|
|
example = ["alice" "bob"];
|
||
|
|
default = ["phundrak"];
|
||
|
|
};
|
||
|
|
passwordAuthentication = mkOption {
|
||
|
|
type = types.bool;
|
||
|
|
example = true;
|
||
|
|
default = false;
|
||
|
|
};
|
||
|
|
port = mkOption {
|
||
|
|
type = types.int;
|
||
|
|
default = 22;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
config.services.openssh = mkIf cfg.enable {
|
||
|
|
inherit (cfg) enable;
|
||
|
|
ports = [cfg.port];
|
||
|
|
settings = {
|
||
|
|
AllowUsers = cfg.allowedUsers;
|
||
|
|
PermitRootLogin = "no";
|
||
|
|
PasswordAuthentication = cfg.passwordAuthentication;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|