We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 50ab0b3 commit 95e9385Copy full SHA for 95e9385
modules/nixos/common/security.nix
@@ -1,10 +1,16 @@
1
+{ inputs, pkgs, ... }:
2
{
3
# Make sure that the firewall is enabled, even if it's the default.
4
networking.firewall.enable = true;
5
6
# allow to access emergency shell with a password
7
boot.initrd.systemd.emergencyAccess = "$6$he2fblfl/H7I.kvz$WbSCMXu8ztmqfj5jG4czqvu/rkMHxufxqHgy1urzXFSN.jZB4QiW5lOjR08vk8pZTyim3TT1wFkMaNE9zZ3sc1";
8
9
+ boot.initrd.network.ssh = {
10
+ enable = true;
11
+ authorizedKeyFiles = pkgs.lib.filesystem.listFilesRecursive "${toString inputs.self}/users/keys";
12
+ };
13
+
14
services.openssh = {
15
hostKeys = [
16
0 commit comments