Added agenix-rekey

2025-12-21 00:36:01 -05:00
parent f4b3ac54ef
commit 388af355bb
13 changed files with 241 additions and 47 deletions
--- a/modules/system/services.nix
+++ b/modules/system/services.nix
@@ -52,14 +52,10 @@

    upower.enable = true;

-    # Enable the OpenSSH daemon. (Look into Fail2Ban in the future)
+    # Disable SSH daemon but generate host keys anyway for secret rekeying
    openssh = {
-      enable = true;
-      settings = {
-        PasswordAuthentication = false;
-        PermitRootLogin = "prohibit-password";
-        AllowUsers = [ "eclypse" ];
-      };
+      enable = false;
+      generateHostKeys = true;
    };

    system76-scheduler.settings.cfsProfiles.enable = true;