nix-config/nixos/viridian/services
jasmine 8874c88fbc
fix(ssh): enable key-based root login and use FQDNs for system services
Fixes backup system authentication and hostname resolution issues.

Changes:
- Change PermitRootLogin from "no" to "prohibit-password" in global SSH config
  (allows key-based root login for host-to-host backups while blocking passwords)
- Update fuchsia onsite backup to use viridian.home.arpa FQDN instead of shortname
- Update SSH knownHosts to use FQDNs (fuchsia.home.arpa, viridian.home.arpa)
  (system-level config uses FQDNs, user shortcuts remain in home-manager)

This enables the complete 3-2-1 backup strategy with automated backups working
correctly between fuchsia and viridian, and fuchsia to BorgBase.
2025-10-07 23:11:31 +08:00
..
borgbackup WIP: SSH configuration restructure 2025-10-07 20:58:09 +08:00
crowdsec remove allowlist 2025-05-30 15:46:35 +08:00
forgejo refactor(viridian): migrate service data to dedicated BTRFS subvolumes 2025-10-06 13:07:46 +08:00
inspircd setup irc network 2025-06-06 18:31:08 +08:00
lighttpd refactor(viridian): migrate service data to dedicated BTRFS subvolumes 2025-10-06 13:07:46 +08:00
minecraft refactor(viridian): migrate service data to dedicated BTRFS subvolumes 2025-10-06 13:07:46 +08:00
mpd fix: Update NFS export IP address format 2025-02-18 21:56:49 +08:00
murmur install murmur 2025-06-04 23:38:48 +08:00
opengist refactor(viridian): migrate service data to dedicated BTRFS subvolumes 2025-10-06 13:07:46 +08:00
snapper fix(viridian): resolve backup system initialization issues 2025-10-07 09:38:07 +08:00
ssh fix(ssh): enable key-based root login and use FQDNs for system services 2025-10-07 23:11:31 +08:00
traefik remove ollama service from fuchsia host 2025-09-29 18:30:59 +08:00
default.nix refactor(ssh): decentralize SSH configuration to per-host services 2025-10-07 22:33:20 +08:00