mirror of
https://github.com/elwrcl/copnix.git
synced 2026-10-31 14:28:02 +03:00
22 lines
501 B
Nix
22 lines
501 B
Nix
{ ... }:
|
|
{
|
|
flake.nixosModules.service-ssh =
|
|
{ ... }:
|
|
{
|
|
services.tailscale.enable = true;
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
openFirewall = false;
|
|
settings = {
|
|
PasswordAuthentication = false;
|
|
KbdInteractiveAuthentication = false;
|
|
PermitRootLogin = "no";
|
|
};
|
|
};
|
|
|
|
networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 22 ];
|
|
networking.firewall.trustedInterfaces = [ "tailscale0" ];
|
|
};
|
|
}
|