feat: ssh configuration

This commit is contained in:
Guz
2024-10-01 19:36:20 -03:00
parent e7a1591235
commit 07fa4c9d81
3 changed files with 16 additions and 4 deletions

1
.ssh/guz.pub Normal file
View File

@@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICA6bcTagMSci1oHpXuq8w3LQ7eaR80yjYrjidkIGv3M spacestation login

View File

@@ -32,6 +32,9 @@
home = "/home/guz";
isNormalUser = true;
extraGroups = ["wheel" "networkmanager" "plugdev" "docker"];
openssh.authorizedKeys.keyFiles = [
./.ssh/guz.pub
];
};
home-manager.users."guz" = import ./homes/guz.nix;
@@ -64,10 +67,10 @@
hostName = "spacestation";
wireless.enable = false;
dhcpcd.enable = true;
defaultGateway = "192.168.1.1";
defaultGateway = "${config.spacestation-secrets.lesser.devices.defaultGateway}";
interfaces."eno1".ipv4.addresses = [
{
address = "192.168.1.10";
address = "${config.spacestation-secrets.lesser.devices.spacestation}";
prefixLength = 24;
}
];
@@ -75,6 +78,10 @@
};
services.openssh.enable = true;
services.openssh.settings = {
PasswordAuthentication = false;
PermitRootLogin = "forced-commands-only";
};
security.rtkit.enable = true;

View File

@@ -3,6 +3,10 @@
"device-ip": "ENC[AES256_GCM,data:Ed6hS/9F52UGVLpAyw==,iv:sg9iVEmZxA2lNJoc0xwLRyDzoF1Cy48wp9CQf3zOOzQ=,tag:77RYGvjgw0QdZUsPcqVTvA==,type:str]",
"homelab-domain": "ENC[AES256_GCM,data:XkgOP94q3gBknoGzcA==,iv:pKnrjhi9VnW0xWIEQfnxV+wb/iNxT/TFs07K9/NW8sU=,tag:N2sGj5lTCJHFBpI9baja9Q==,type:str]",
"cloudflare-funnel": "ENC[AES256_GCM,data:bUGjnOkfGZaXV7htm0QotjMRs9fMXRQ1zR+KMLicBfYSpEj6rlrg8zos4eGXfueYvHbL/+kgtG+ncmmWCClHyVVeF7lJFykzu0/x/EVf7ia0p451CghfXJ0uJPoH03S42zru/B2OfF0nyatXdknd6s6mn6vsO7eT37OzjFANB51nhPTX+rYi+TAdN9CRVp11TwGcY6ag9jDKo/AbsFPrmwasSXELeYFnNNkI78+4uPeusYoRFhn/uA==,iv:TgaFg5nCc0DDiVI28Fk8OHJ+cJjd90eTt6kKVgzT7mQ=,tag:kEFXsDqSbfq+z3ayDmofow==,type:str]",
"devices": {
"defaultGateway": "ENC[AES256_GCM,data:0/7uxwYJi65l3fw=,iv:LH5/6P8uKphBpiRCTUJuTe99qJuExn0TNOlmEO9CtY0=,tag:4hnscOeIYbH97SGqz/gPGA==,type:str]",
"spacestation": "ENC[AES256_GCM,data:4Sv2ukbvy7R5MZn4,iv:f6I57L1dGHVSIravgpK8Ui4fbw0y60mdjCjAl+L55v4=,tag:qF749Etc7PxK8lG5GfTpyw==,type:str]"
},
"services": {
"adguard": {
"domain": "ENC[AES256_GCM,data:HBSOMhBmEGjzmAtXiulXDcDzWbUD,iv:NcL5I//0buHgMtZX4BEv2i66pYsZAZkLBWfZDe8tWhg=,tag:5f3y6wjCAjiD7qTxwx0ltA==,type:str]",
@@ -54,8 +58,8 @@
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnL3dCY1VLMmoxRFRmS0Ir\nV0ppTnI0RE5ZMjcvRGNPWkNxWFdJYTBDTG00ClRGQkh1UStGTmc0RE5aNy9nL3FI\nbHJIa3hLR0ZkTjd6WkFzOFkzeFdMNUEKLS0tIDBidk93Qy9LenFlSGZ2aEpuTUFt\nWVM2eS9UdXAvbzE4eEdKMjVEM3RLdm8KKeIhk+YOKVL9Y19lLyb6/Pxv8rbewK2e\nLm96jx+LOMOCFcQGxuFKWqQbTB4br/cPvRKSY5jFmFWqVg7pCPTAzQ==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2024-09-18T01:25:20Z",
"mac": "ENC[AES256_GCM,data:f7KDdiyhcRpGFwVJIs/AU5t++1cQnHxr1kBJTAcZ7v0TTIqjVMwXd6JtcEX8p6voiTXbj+/pVJ0d0ucy6BZdnC8f97wnRpVUlsogeWGfotQCamfrqqa8NTNrg9uMeZqZefPDE5OikCPeyP7fyhJzbm6FmgZEcwsp4o3YefXwqxA=,iv:UzfDPzkNJGlgOF/eJAeekYKV7j50CK6p8EC2LflLoGI=,tag:0yQ0mXl9vBbwReXCuhWWHQ==,type:str]",
"lastmodified": "2024-10-01T22:30:14Z",
"mac": "ENC[AES256_GCM,data:hUuc7hWvuNneU0zhHfXbIXarBjmavUB6a6q4BP7go9NTPXhmCLOr6ey/Lm2nhaTA4ahd8ZxrraiWGFpC5FzblKzR70VKUDX9YqJiu1m6RraMGmnhP+sa8HgwvnPsxvkS2WuKei6t+fbfyKl1fn1S8P4F6rFvNlTmbNubDcSOgxs=,iv:ojAqKDdcvpGIZ/k/5fwuwwjsofIzTu63VUp5gsGJLZA=,tag:MYypOSWk1b6VWYBoJNPzQA==,type:str]",
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.0"