summaryrefslogtreecommitdiffstats
path: root/tv
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2016-07-23 13:11:50 +0200
committertv <tv@krebsco.de>2016-07-23 13:11:50 +0200
commit268303de888591f4b98dc610f89707cd3cfe3ef7 (patch)
tree4cabdbf57d27aa02e38cbf6b10d649e5d45fe196 /tv
parentce32d546deb0bab0fc664d65abe458fee34a5123 (diff)
tv sshd: init
Diffstat (limited to 'tv')
-rw-r--r--tv/2configs/default.nix11
-rw-r--r--tv/2configs/sshd.nix16
2 files changed, 17 insertions, 10 deletions
diff --git a/tv/2configs/default.nix b/tv/2configs/default.nix
index c77c9cea..7992c90c 100644
--- a/tv/2configs/default.nix
+++ b/tv/2configs/default.nix
@@ -30,6 +30,7 @@ with config.krebs.lib;
./bash.nix
./nginx
./ssh.nix
+ ./sshd.nix
./vim.nix
{
# stockholm dependencies
@@ -136,16 +137,6 @@ with config.krebs.lib;
}
{
- services.openssh = {
- enable = true;
- hostKeys = [
- { type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; }
- ];
- };
- tv.iptables.input-internet-accept-tcp = singleton "ssh";
- }
-
- {
environment.systemPackages = [
pkgs.get
pkgs.krebszones
diff --git a/tv/2configs/sshd.nix b/tv/2configs/sshd.nix
new file mode 100644
index 00000000..943f32fe
--- /dev/null
+++ b/tv/2configs/sshd.nix
@@ -0,0 +1,16 @@
+{ config, lib, pkgs, ... }:
+
+with config.krebs.lib;
+
+{
+ services.openssh = {
+ enable = true;
+ hostKeys = [
+ {
+ type = "ed25519";
+ path = "/etc/ssh/ssh_host_ed25519_key";
+ }
+ ];
+ };
+ tv.iptables.input-internet-accept-tcp = singleton "ssh";
+}