Jan/nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added persistence to ssh host keys

Browse Source
This commit is contained in:
Jan-Bulthuis 2025-05-29 20:28:07 +02:00
parent cd91944b1e
commit 76e609372f
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/nixos/ssh.nix
View File

@ -11,5 +11,17 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
services.openssh.enable = true; services.openssh.enable = true;
# TODO: Is this default configuration secure? # TODO: Is this default configuration secure?
services.openssh.hostKeys = mkIf (config.modules.impermanence.enable) [
{
type = "ed25519";
path = "/persist/system/etc/ssh/ssh_host_ed25519_key";
}
{
type = "rsa";
bits = 4096;
path = "/persist/system/etc/ssh/ssh_host_rsa_key";
}
];
}; };
} }