Chickadee/modules/ssh.nix

{ config, lib, pkgs, ... }:

let
  me = config.network.nodes.${config.network.node};
in
{
  networking.firewall = {
    enable = true;
	allowedTCPPorts = [ 22 ];
  };
  services.openssh = {
    enable = true;
	settings = {
      PermitRootLogin = "prohibit-password";
	  PasswordAuthentication = false;
	  KbdInteractiveAuthentication = false;
	};
	listenAddresses = [{
      addr = "0.0.0.0";
	  port = 22;
	}];
  };

  users.users.root.openssh.authorizedKeys.keys = [
    config.network.nodes.laptop.ssh
	config.network.nodes.desktop.ssh
  ];
  users.users.lilac = lib.mkIf (config.network.node != "vps") {
    openssh.authorizedKeys.keys = [
      config.network.nodes.laptop.ssh
      config.network.nodes.desktop.ssh
    ];
  };
}