fixed ssh at first boot

This commit is contained in:
2026-04-06 18:40:17 -05:00
parent e67b4fecc4
commit 94d94fb7a2
3 changed files with 29 additions and 10 deletions

View File

@@ -2,14 +2,11 @@
lib.mkIf config.sovran_systemsOS.features.sshd {
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = "yes";
};
};
# Extend to listen on all interfaces for remote access
services.openssh.listenAddresses = lib.mkForce [
{ addr = "127.0.0.1"; port = 22; }
{ addr = "0.0.0.0"; port = 22; }
];
# Only open port 22 when SSH is actually enabled
networking.firewall.allowedTCPPorts = [ 22 ];
@@ -20,4 +17,4 @@ lib.mkIf config.sovran_systemsOS.features.sshd {
ignoreIP = [ "127.0.0.0/8" "10.0.0.0/8" "172.16.0.0/12" "192.168.0.0/16" ];
};
}
}