Compare commits

..

2 commits

View file

@ -12,7 +12,6 @@ in {
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
(import "${home-manager}/nixos") (import "${home-manager}/nixos")
#../../flakes/wishlist/wishlist.nix
#../modules/server/nginx.nix #../modules/server/nginx.nix
#../modules/server/ssh.nix #../modules/server/ssh.nix
#../modules/server/fail2ban.nix #../modules/server/fail2ban.nix
@ -89,12 +88,8 @@ in {
]; ];
}; };
subspace = let # TODO: reduce security implications of subspace
# override subspace = {
wishlistBash =
pkgs.bash.override {
};
in {
isNormalUser = true; isNormalUser = true;
shell = pkgs.bash; shell = pkgs.bash;
home = "/home/subspace"; home = "/home/subspace";
@ -102,15 +97,6 @@ in {
wishlist wishlist
]; ];
}; };
# user for friends to ssh into
friends = {
isNormalUser = true;
shell = pkgs.bash;
home = "/home/friends"; # TEMP: remove and replace with home-manager
packages = with pkgs; [
];
};
}; };
}; };
@ -196,9 +182,9 @@ in {
enable = true; enable = true;
ports = [22]; ports = [22];
settings = { settings = {
PasswordAuthentication = true; PasswordAuthentication = false;
PermitRootLogin = "no"; PermitRootLogin = "no";
AllowUsers = ["ae" "subspace"]; # allow all users by default AllowUsers = ["ae" "subspace"]; # DO NOT ALLOW ALL
UseDns = true; UseDns = true;
X11Forwarding = false; X11Forwarding = false;
}; };