hosts/blackberry/nix-ssh.nix

   1 { pkgs, lib, config, ... }:
   2 {
   3   nix = {
   4     settings.allowed-users = [ config.users.users."nix-ssh".name ];
   5     sshServe = {
   6       enable = true;
   7       keys = map lib.readFile [
   8         ../../users/julm/ssh/losurdo.pub
   9         ../../users/sevy/ssh/patate.pub
  10         ../../users/julm/ssh/pumpkin.pub
  11         ../../users/julm/ssh/oignon.pub
  12       ];
  13     };
  14   };
  15   networking.nftables.ruleset = ''
  16     table inet filter {
  17       chain input-lan {
  18         tcp dport 22 counter accept comment "SSH"
  19       }
  20     }
  21   '';
  22 }