diff options
author | tv <tv@krebsco.de> | 2016-07-23 13:11:50 +0200 |
---|---|---|
committer | tv <tv@krebsco.de> | 2016-07-23 13:11:50 +0200 |
commit | 268303de888591f4b98dc610f89707cd3cfe3ef7 (patch) | |
tree | 4cabdbf57d27aa02e38cbf6b10d649e5d45fe196 | |
parent | ce32d546deb0bab0fc664d65abe458fee34a5123 (diff) |
tv sshd: init
-rw-r--r-- | tv/2configs/default.nix | 11 | ||||
-rw-r--r-- | tv/2configs/sshd.nix | 16 |
2 files changed, 17 insertions, 10 deletions
diff --git a/tv/2configs/default.nix b/tv/2configs/default.nix index c77c9cea9..7992c90cb 100644 --- a/tv/2configs/default.nix +++ b/tv/2configs/default.nix @@ -30,6 +30,7 @@ with config.krebs.lib; ./bash.nix ./nginx ./ssh.nix + ./sshd.nix ./vim.nix { # stockholm dependencies @@ -136,16 +137,6 @@ with config.krebs.lib; } { - services.openssh = { - enable = true; - hostKeys = [ - { type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; } - ]; - }; - tv.iptables.input-internet-accept-tcp = singleton "ssh"; - } - - { environment.systemPackages = [ pkgs.get pkgs.krebszones diff --git a/tv/2configs/sshd.nix b/tv/2configs/sshd.nix new file mode 100644 index 000000000..943f32fe9 --- /dev/null +++ b/tv/2configs/sshd.nix @@ -0,0 +1,16 @@ +{ config, lib, pkgs, ... }: + +with config.krebs.lib; + +{ + services.openssh = { + enable = true; + hostKeys = [ + { + type = "ed25519"; + path = "/etc/ssh/ssh_host_ed25519_key"; + } + ]; + }; + tv.iptables.input-internet-accept-tcp = singleton "ssh"; +} |