feat: refactor the modules/servers directory.

2026-01-19 21:36:24 +01:00 · 2026-01-19 21:36:24 +01:00 · 8b754d3a7e
commit 8b754d3a7e
parent 4e783c052b
69 changed files with 61 additions and 62 deletions
--- a/modules/servers/common/openssh.nix
+++ b/modules/servers/common/openssh.nix
@ -0,0 +1,32 @@
+{
+  config,
+  lib,
+  ...
+}: {
+  services.openssh = {
+    enable = true;
+    settings = {
+      AllowUsers =
+        lib.mkIf (config.networking.hostName != "tyr")
+        [
+          "root@65.21.241.194"
+          "root@172.16.0.2"
+          "crony@65.21.241.194"
+          "crony@172.16.0.2"
+        ];
+      X11Forwarding = false;
+      PasswordAuthentication = false;
+    };
+    extraConfig = ''
+      PubkeyAuthentication yes
+      PermitEmptyPasswords no
+
+      AddressFamily inet
+      MaxAuthTries 3
+    '';
+  };
+
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBJLduAXHWJiglmfRfkBGKffzVWkJP6porxIzw6+Zz3W crony@cronyakatsuki.xyz"
+  ];
+}