• smiletolerantly
    link
    fedilink
    arrow-up
    4
    ·
    4 个月前

    Ehm… I’m also on Nixos and I’d say it’s super trivial.

    services.openssh = {
      enable = true;
      settings = {
        PasswordAuthentication = false;
        PermitRootLogin = "no";
      };
    };
    
    users.users.<name>.openssh.authorizedKeys.keys = [ list of pubkeys ideally read from file in repo ];
    
    • Urist@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 个月前

      So easy it should be illegal! I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!?

      • smiletolerantly
        link
        fedilink
        arrow-up
        3
        ·
        4 个月前

        I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!?

        Why, by boasting that it’s so easy, just look at that, it is only two options you need to set thanks to the 80 custom modules I’ve written to abstract the abstractions from nixpkgs!

        I WISH I could put an /s here, but I cannot.