Olivier
2a911b057b
- Introduced a new `navi` module for managing deployments across multiple hosts. - Enhanced SSH inventory management to support public key application for authorized hosts. - Configured system deployment builder for seamless integration with Navi. - Updated various host configurations to enable deployment capabilities and streamline SSH access.
28 lines
788 B
Nix
28 lines
788 B
Nix
{ self, ... }: {
|
|
#TODO[epic=Moderate] Move this somewhere else, would prefer not relying on this module
|
|
flake.nixosModules."client-services" = { ... }: {
|
|
imports = [
|
|
self.nixosModules.systemBluetooth
|
|
self.nixosModules.systemDeployBuilder
|
|
];
|
|
|
|
chiasson.system.deploy.builder.enable = true;
|
|
|
|
# Lab-ish SSH defaults on clients — tighten for anything exposed.
|
|
services.openssh = {
|
|
enable = true;
|
|
settings = {
|
|
KbdInteractiveAuthentication = false;
|
|
PasswordAuthentication = true;
|
|
PermitRootLogin = "yes"; # consider tightening later
|
|
UseDns = false;
|
|
};
|
|
};
|
|
|
|
# Printing, polkit, udisks.
|
|
services.printing.enable = true;
|
|
security.polkit.enable = true;
|
|
services.udisks2.enable = true;
|
|
};
|
|
}
|