diff options
| -rw-r--r-- | common.nix | 2 | ||||
| -rw-r--r-- | hosts/kay/configuration.nix | 6 | ||||
| -rw-r--r-- | hosts/kay/hardware-configuration.nix | 1 | ||||
| -rw-r--r-- | modules/userdata.nix | 8 |
4 files changed, 17 insertions, 0 deletions
@@ -3,6 +3,7 @@ let user = config.userdata.user; groups = config.userdata.groups; + pubKeys = config.userdata.pubKeys; host = config.networking.hostName; in { @@ -47,6 +48,7 @@ in brightnessctl neofetch ]; + openssh.authorizedKeys.keys = pubKeys; }; # system diff --git a/hosts/kay/configuration.nix b/hosts/kay/configuration.nix index da92a83..11b99d9 100644 --- a/hosts/kay/configuration.nix +++ b/hosts/kay/configuration.nix @@ -6,6 +6,12 @@ ../../common.nix ]; + services.openssh = { + enable = true; + settings = { PasswordAuthentication = false; }; + }; + + boot.consoleLogLevel = 3; networking.hostName = "kay"; environment.systemPackages = with pkgs; [ tmux ]; } diff --git a/hosts/kay/hardware-configuration.nix b/hosts/kay/hardware-configuration.nix index 1583736..3299f3f 100644 --- a/hosts/kay/hardware-configuration.nix +++ b/hosts/kay/hardware-configuration.nix @@ -5,6 +5,7 @@ boot = { kernelModules = [ "kvm-intel" ]; + blacklistedKernelModules = [ "nouveau" ]; initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" diff --git a/modules/userdata.nix b/modules/userdata.nix index 84a8ca1..ffb5847 100644 --- a/modules/userdata.nix +++ b/modules/userdata.nix @@ -19,5 +19,13 @@ in default = "sinanmohd.com"; description = mdDoc "Owner's domain"; }; + pubKeys = mkOption { + type = types.listOf types.str; + description = mdDoc "Owner's public ssh keys"; + default = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDCeMXhkjm9CabbA/1xdtP9bvFEm8pVXPk66NmI9/VvQ sinan@veu" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL8LnyOuPmtKRqAZeHueNN4kfYvpRQVwCivSTq+SZvDU sinan@cez" + ]; + }; }; } |