wolcen/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security changes...ssh/firewall

Browse source
This commit is contained in:
Chris Thompson 2025-01-06 14:48:07 -05:00
parent 5e73c697d5
commit 977a67e2fd
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
hosts/default/configuration.nix
View file

@ -140,7 +140,7 @@
# And system-specific settings: # And system-specific settings:
users.users.wolcen = { users.users.wolcen = {
description = "Chris Thompson"; description = "Chris Thompson";
openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEdxdKYrlwOolJpYxvWu6gW/60pzT6aKN6JHhnTSBFqN wolcen@typhoon" ]; openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEdxdKYrlwOolJpYxvWu6gW/60pzT6aKN6JHhnTSBFqN wolcen@typhoon" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINTFJeOIRwEw09EhFdssRHOdb+T7o84FC+ULMQzXDewE wolcen@wolcen-ThinkPad-X220" ];
extraGroups = [ "networkmanager" "wheel" "docker" "dialout" ]; extraGroups = [ "networkmanager" "wheel" "docker" "dialout" ];
}; };
@ -163,7 +163,7 @@
# For xdebug...verify actual necessity # For xdebug...verify actual necessity
# Have had to use this, but I think it can be disabled still - perhaps w/xdebug binding setting...don't know. # Have had to use this, but I think it can be disabled still - perhaps w/xdebug binding setting...don't know.
networking.firewall.allowedTCPPorts = [ 9003 ]; #networking.firewall.allowedTCPPorts = [ 9003 ];
# Allow unfree packages # Allow unfree packages
nixpkgs.config.allowUnfree = true; nixpkgs.config.allowUnfree = true;
@ -273,6 +273,7 @@
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.ports = [ 2112 ]; # must be a list...for some reason. services.openssh.ports = [ 2112 ]; # must be a list...for some reason.
services.openssh.settings.PasswordAuthentication = false;
# Enable mobile shell (for roaming, intermittent connectivity, etc) # Enable mobile shell (for roaming, intermittent connectivity, etc)
programs.mosh.enable = true; programs.mosh.enable = true;