sshd

hosts/enry/configuration.nix

@@ -35,7 +35,7 @@
     extraGroups = ["networkmanager" "wheel" "dialout" "syncthing"];
     initialPassword = "correcthorsebatterystaple";
     openssh.authorizedKeys.keys = [
-      # TODO: Add your SSH public key(s) here, if you plan on using SSH to connect
+      "SHA256:RrcbPCE9BPVLAEhERm81NwXA28OKpn9U6irR2vG7K5I user@phoenix";
     ];
   };
 
@@ -53,6 +53,18 @@
   #   enableSSHSupport = true;
   # };
 
+  # This setups a SSH server. Very important if you're setting up a headless system.
+  # Feel free to remove if you don't need it.
+  services.openssh = {
+    enable = true;
+    settings = {
+      # Forbid root login through SSH.
+      PermitRootLogin = "no";
+      # Use keys only. Remove if you want to SSH using password (not recommended)
+      PasswordAuthentication = false;
+    };
+  };
+
   environment.systemPackages = with pkgs; [
   ];