nixos-config/modules/system/services/forgejo/ssh.nix
2025-06-04 21:55:01 +02:00

16 lines
423 B
Nix

{ config, lib, ... }:
{
options.custom.services.forgejo.ssh.enable = lib.mkEnableOption "";
config = lib.mkIf config.custom.services.forgejo.ssh.enable {
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = "no";
AllowUsers = [ config.users.users.forgejo.name ];
};
};
};
}