feat(nixos): Enable SSH server on PC

mrjones2014 · Nov 26, 2024 · c0f0b89 · c0f0b89
1 parent 7dd173a
commit c0f0b89
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 15 deletions.
diff --git a/hosts/pc/default.nix b/hosts/pc/default.nix
@@ -4,6 +4,7 @@
     ../../nixos-modules/desktop_environment.nix
     ../../nixos-modules/_1password.nix
     ../../nixos-modules/allowed-unfree.nix
+    ../../nixos-modules/sshd.nix
     ./hardware-configuration.nix
   ];
   boot.loader.efi.efiSysMountPoint = "/boot/efi";

diff --git a/hosts/server/default.nix b/hosts/server/default.nix
@@ -29,6 +29,7 @@
     ./containers.nix
     ./wireguard.nix
     ./gotify.nix
+    ../../nixos-modules/sshd.nix
   ];
 
   powerManagement.cpuFreqGovernor = "performance";
@@ -40,18 +41,6 @@
       efi.efiSysMountPoint = "/boot";
     };
   };
-  services = {
-    fail2ban.enable = true;
-    openssh = {
-      enable = true;
-      settings = {
-        # only allow SSH key auth
-        PasswordAuthentication = false;
-        PermitRootLogin = "no";
-        AllowUsers = [ "mat" ];
-      };
-    };
-  };
 
   # enable vaapi on OS-level
   nixpkgs.config.packageOverrides = pkgs: {

diff --git a/nixos-modules/common.nix b/nixos-modules/common.nix
@@ -107,9 +107,6 @@
           "podman"
           "dialout" # to connect to arduino
         ];
-        openssh.authorizedKeys.keys = [
-          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDsT6GLG7sY8YKX7JM+jqS3EAti3YMzwHKWViveqkZvu"
-        ];
       };
     };
   };

diff --git a/nixos-modules/sshd.nix b/nixos-modules/sshd.nix
@@ -0,0 +1,18 @@
+{
+  services = {
+    fail2ban.enable = true;
+    openssh = {
+      enable = true;
+      settings = {
+        # only allow SSH key auth
+        PasswordAuthentication = false;
+        PermitRootLogin = "no";
+        AllowUsers = [ "mat" ];
+      };
+    };
+  };
+
+  user.users.mat.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDsT6GLG7sY8YKX7JM+jqS3EAti3YMzwHKWViveqkZvu"
+  ];
+}