17 lines
304 B
Nix
17 lines
304 B
Nix
{ lib, config, ... }:
|
|
{
|
|
|
|
config = {
|
|
services.openssh = {
|
|
enable = true;
|
|
settings.PasswordAuthentication = false;
|
|
};
|
|
security = {
|
|
sudo.execWheelOnly = true;
|
|
pam = {
|
|
sshAgentAuth.enable = true;
|
|
services.sudo.sshAgentAuth = true;
|
|
};
|
|
};
|
|
};
|
|
}
|