openssh

home/rachel.nix

@@ -350,5 +350,19 @@ in
           ''; in "${tmux-menu}";
       };
     };
+
+    ssh = {
+      enable = true;
+      matchBlocks = {
+        remarkable = {
+          hostname = "10.11.99.1";
+          user = "root";
+        };
+        lazarus = {
+          hostname = "rachel.cafe";
+          user = "deppy";
+        };
+      };
+    };
   };
 }

lambda/configuration.nix

@@ -63,6 +63,14 @@
   networking.nameservers = [ "8.8.8.8" ];
   networking.resolvconf.dnsExtensionMechanism = false;
 
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = true;
+      PermitRootLogin = false;
+    };
+  };
+
   # [NFS]
   fileSystems."/home/rachel/music" = {
     device = "rachel.cafe:/srv/music";
@@ -145,7 +153,7 @@
 
   # [SECURITY / FIREWALL]
   networking.firewall.enable = true;
-  networking.firewall.allowedTCPPorts = [ ];
+  networking.firewall.allowedTCPPorts = [ 22 ];
   networking.firewall.allowedUDPPorts = [ ];
   programs.gnupg.agent = {
     enable = true;