treewide: separate ssh keys

2026-05-02 17:10:15 -04:00
parent 60d191fd5f
commit f4b32d90d0
5 changed files with 33 additions and 18 deletions
@@ -0,0 +1,17 @@
+{ self, ... }:
+{
+  services.openssh = {
+    enable = true;
+
+    settings = {
+      ClientAliveInterval = 300;
+      KbdInteractiveAuthentication = false;
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+    };
+  };
+
+  users.users.root.openssh.authorizedKeys.keys = builtins.attrValues {
+    inherit (import "${self}/lib/ssh/keys.nix") error javalsai;
+  };
+}