tmp: Move ssh.nix to module

1 files changed, 19 insertions, 0 deletions

diff --git a/hosts/ahmed/ssh/default.nix b/hosts/ahmed/ssh/default.nix
new file mode 100644
index 0000000..3c6b7ad
--- /dev/null
+++ b/hosts/ahmed/ssh/default.nix
@@ -0,0 +1,19 @@
+# This file configures openSSH on this host.
+{
+  lib,
+  metadata,
+  ...
+}: {
+  # Who is allowed/expected to connect to this machine?
+  networking.firewall.allowedTCPPorts = [22];
+  services.openssh = {
+    enable = true;
+    settings.PasswordAuthentication = false;
+  };
+
+  users.users = lib.genAttrs ["root" "linus"] (_: {
+    openssh.authorizedKeys.keys = [
+      metadata.hosts.muhammed.sshPubKey
+    ];
+  });
+}