modules/nixos/common: add initrd ssh

nix-community · Aug 2, 2024 · 042e068 · 042e068
1 parent d486e79
commit 042e068
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/modules/nixos/common/security.nix b/modules/nixos/common/security.nix
@@ -1,10 +1,16 @@
+{ inputs, pkgs, ... }:
 {
   # Make sure that the firewall is enabled, even if it's the default.
   networking.firewall.enable = true;
 
   # allow to access emergency shell with a password
   boot.initrd.systemd.emergencyAccess = "$6$he2fblfl/H7I.kvz$WbSCMXu8ztmqfj5jG4czqvu/rkMHxufxqHgy1urzXFSN.jZB4QiW5lOjR08vk8pZTyim3TT1wFkMaNE9zZ3sc1";
 
+  boot.initrd.network.ssh = {
+    enable = true;
+    authorizedKeyFiles = pkgs.lib.filesystem.listFilesRecursive "${toString inputs.self}/users/keys";
+  };
+
   services.openssh = {
     hostKeys = [
       {