From a37060825c8d3aa9093ac585a5bd3e468fd779e4 Mon Sep 17 00:00:00 2001 From: notohh Date: Wed, 26 Apr 2023 20:04:16 -0400 Subject: [PATCH] chore: move sops, disable root login --- modules/openssh.nix | 3 +-- sops.yaml => secrets/sops.yaml | 0 2 files changed, 1 insertion(+), 2 deletions(-) rename sops.yaml => secrets/sops.yaml (100%) diff --git a/modules/openssh.nix b/modules/openssh.nix index 7b44946..19bfa90 100644 --- a/modules/openssh.nix +++ b/modules/openssh.nix @@ -4,11 +4,10 @@ settings = { PasswordAuthentication = false; PubkeyAuthentication = true; - PermitRootLogin = "yes"; + PermitRootLogin = "no"; StreamLocalBindUnlink = "yes"; GatewayPorts = "clientspecified"; }; - hostKeys = [ { path = "/etc/ssh/ssh_host_ed25519_key"; diff --git a/sops.yaml b/secrets/sops.yaml similarity index 100% rename from sops.yaml rename to secrets/sops.yaml