31 lines
696 B
Nix
31 lines
696 B
Nix
|
{ ... }:
|
||
|
|
|
||
|
|
{
|
||
|
|
|
||
|
|
# https://search.nixos.org/options?channel=24.11&from=0&size=50&sort=relevance&type=packages&query=services.openssh
|
||
|
|
services.openssh = {
|
||
|
|
enable = true;
|
||
|
|
settings.PasswordAuthentication = true;
|
||
|
|
settings.KbdInteractiveAuthentication = false;
|
||
|
|
settings.PermitRootLogin = "no";
|
||
|
|
listenAddresses = [
|
||
|
|
{
|
||
|
|
addr = "0.0.0.0";
|
||
|
|
port = 22;
|
||
|
|
}
|
||
|
|
];
|
||
|
|
};
|
||
|
|
|
||
|
|
systemd.services.ssh = {
|
||
|
|
wants = [ "network-online.target" ];
|
||
|
|
after = [ "network-online.target" ];
|
||
|
|
requires = [ "network-online.target" ];
|
||
|
|
serviceConfig = {
|
||
|
|
Restart = "on-failure";
|
||
|
|
RestartSec = "5s";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
networking.firewall.allowedTCPPorts = [ 22 ];
|
||
|
|
}
|