nixos/services/sshd.nix

{ config, lib, pkgs, ... }:

{
  services.openssh = {
    enable = true;
    ports = [ 22 ];
    settings = {
      UseDns = true;
      PermitRootLogin = "without-password";
      PasswordAuthentication = false;
      GatewayPorts = "yes";
      LogLevel = "VERBOSE";
    };
  };
}
Clean up and add services Remove jupyter service and qbittorrent traefik route Add ntfy-sh (enabled) and initial grafana (not enabled) expressions Change services to call own traefik expression, rather than needing to be called explicitly 2023-10-21 17:55:11 +01:00			`{ config, lib, pkgs, ... }:`

			`{`
Move server directory and syncthing into services directory Separate service setup from traefik config for each, prep for future server separation 2023-05-26 08:52:46 +01:00			`services.openssh = {`
			`enable = true;`
Clean up and add services Remove jupyter service and qbittorrent traefik route Add ntfy-sh (enabled) and initial grafana (not enabled) expressions Change services to call own traefik expression, rather than needing to be called explicitly 2023-10-21 17:55:11 +01:00			`ports = [ 22 ];`
Move server directory and syncthing into services directory Separate service setup from traefik config for each, prep for future server separation 2023-05-26 08:52:46 +01:00			`settings = {`
			`UseDns = true;`
Adjust sshd settings Allow root login via key only Prune number of authorised keys 2023-10-22 06:52:38 +01:00			`PermitRootLogin = "without-password";`
Move server directory and syncthing into services directory Separate service setup from traefik config for each, prep for future server separation 2023-05-26 08:52:46 +01:00			`PasswordAuthentication = false;`
			`GatewayPorts = "yes";`
			`LogLevel = "VERBOSE";`
			`};`
			`};`
			`}`