services.nix
1# hosts/infra-rtw-run/services.nix
2# Host-level services for infra.rtw.run. The forge itself (soft-serve, the
3# site, backups) is roles/forge.
4{ ... }:
5{
6 services.openssh = {
7 enable = true;
8 ports = [ 22 ];
9 settings = {
10 PasswordAuthentication = false;
11 PubkeyAuthentication = true;
12 PermitRootLogin = "prohibit-password";
13 X11Forwarding = false;
14 AllowUsers = [ "root" "btburke" ];
15 };
16 };
17
18 networking.firewall.allowedTCPPorts = [ 22 ];
19}