• smiletolerantly@awful.systems
    link
    fedilink
    arrow-up
    4
    ·
    1か月前

    Ehm… I’m also on Nixos and I’d say it’s super trivial.

    services.openssh = {
      enable = true;
      settings = {
        PasswordAuthentication = false;
        PermitRootLogin = "no";
      };
    };
    
    users.users.<name>.openssh.authorizedKeys.keys = [ list of pubkeys ideally read from file in repo ];
    
    • Urist@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      1か月前

      So easy it should be illegal! I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!?

      • smiletolerantly@awful.systems
        link
        fedilink
        arrow-up
        3
        ·
        1か月前

        I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!?

        Why, by boasting that it’s so easy, just look at that, it is only two options you need to set thanks to the 80 custom modules I’ve written to abstract the abstractions from nixpkgs!

        I WISH I could put an /s here, but I cannot.