refactor(modules): make sure nothing is added without setting enable

2025-01-04 19:02:30 -05:00 · 2025-01-04 19:02:30 -05:00 · 49dc072b81
commit 49dc072b81
parent 4a2ad39114
56 changed files with 684 additions and 506 deletions
--- a/modules/server/sshd/default.nix
+++ b/modules/server/sshd/default.nix
@ -0,0 +1,33 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  inherit (lib) mkForce mkIf;
+
+  cfg = config.roles.server;
+in {
+  config = mkIf (cfg.enable && cfg.sshd.enable) {
+    services = {
+      openssh = {
+        enable = true;
+        settings = {
+          PasswordAuthentication = false;
+          PermitRootLogin = mkForce "no";
+        };
+      };
+    };
+
+    users.users.${cfg.user} = {
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPE39uk52+NIDLdHeoSHIEsOUUFRzj06AGn09z4TUOYm matt@OP9"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICr2+CpqXNMLsjgbrYyIwTKhlVSiIYol1ghBPzLmUpKl matt@binto"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJGbLu+Gb7PiyNgNXMHemaQLnKixebx1/4cdJGna9OQp matt@wim"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII1bYbOemBJHjm5onaRE52YvGiTAr+bS0l4tCjXSXud9 matt@servivi"
+      ];
+    };
+  };
+
+  # For accurate stack trace
+  _file = ./default.nix;
+}