• smiletolerantly@awful.systems
    3·
    13 hours ago

    Ehm… I’m also on Nixos and I’d say it’s super trivial.

    services.openssh = {
  enable = true;
  settings = {
    PasswordAuthentication = false;
    PermitRootLogin = "no";
  };
};

users.users.<name>.openssh.authorizedKeys.keys = [ list of pubkeys ideally read from file in repo ];
    • Urist@lemmy.mlEnglish
      2·
      7 hours ago

      So easy it should be illegal! I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!?

      • smiletolerantly@awful.systems
        2·
        6 hours ago

        I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!?

        Why, by boasting that it’s so easy, just look at that, it is only two options you need to set thanks to the 80 custom modules I’ve written to abstract the abstractions from nixpkgs!

        I WISH I could put an /s here, but I cannot.