mirror of
https://git.sr.ht/~magic_rb/dotfiles
synced 2024-11-30 03:56:12 +01:00
26 lines
538 B
Nix
26 lines
538 B
Nix
{ config, pkgs, lib, ... }:
|
|
with lib;
|
|
let
|
|
cfg = config.magic_rb.vpsRemoteAccess;
|
|
in
|
|
{
|
|
options.magic_rb = {
|
|
vpsRemoteAccess = {
|
|
enable = mkEnableOption "Enable VPS remote access module.";
|
|
trustedWheel = mkEnableOption "Add the wheel group to Nix trusted-users.";
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable
|
|
{
|
|
nix.trustedUsers = mkIf cfg.trustedWheel
|
|
[ "@wheel" ];
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
passwordAuthentication = false;
|
|
permitRootLogin = "no";
|
|
};
|
|
};
|
|
}
|