Rebase to flake parts #3

2026-05-01 17:19:42 -03:00
parent 32df2c3573
commit 2c576715de
6 changed files with 83 additions and 1 deletions
@@ -0,0 +1,22 @@
+{ self, ... }: {
+  #TODO[epic=Moderate] Move this somewhere else, would prefer not relying on this module
+  flake.nixosModules."client-services" = { ... }: {
+    imports = [ self.nixosModules.systemBluetooth ];
+
+    # Lab-ish SSH defaults on clients — tighten for anything exposed.
+    services.openssh = {
+      enable = true;
+      settings = {
+        KbdInteractiveAuthentication = false;
+        PasswordAuthentication = true;
+        PermitRootLogin = "yes"; # consider tightening later
+        UseDns = false;
+      };
+    };
+
+    # Printing, polkit, udisks.
+    services.printing.enable = true;
+    security.polkit.enable = true;
+    services.udisks2.enable = true;
+  };
+}