dotfiles.nix/nixos/common/global/ssh.nix

22 lines
362 B
Nix

{ ... }:
{
services.openssh = {
enable = true;
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
LogLevel = "VERBOSE";
};
ports = [ 62841 ];
openFirewall = true;
};
services.rsyslogd = {
enable = true;
extraConfig = ''
if $programname == 'sshd' then /var/log/sshd.log
'';
};
}