kawaiipunk/nix-server
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added a non root user

Browse Source
This commit is contained in:
KawaiiPunk
2026-05-27 22:53:50 +01:00
parent 46b66d8508
commit 1cd3fb890e
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
configuration.nix
View File

@ -60,18 +60,25 @@
ports = [ 222 ]; ports = [ 222 ];
settings = { settings = {
PasswordAuthentication = false; PasswordAuthentication = false;
PermitRootLogin = "prohibit-password"; # Disable root SSH login entirely
PermitRootLogin = "no";
}; };
}; };
# SSHGuard — monitors logs for brute-force attempts and blocks offending IPs # SSHGuard — monitors logs for brute-force attempts and blocks offending IPs
services.sshguard.enable = true; services.sshguard.enable = true;
# Security # Security — passwordless sudo for wheel group
security.sudo.wheelNeedsPassword = true; security.sudo = {
enable = true;
wheelNeedsPassword = false;
};
# User configuration # User configuration
users.users.root = { users.users.kawaiipunk = {
isNormalUser = true;
# wheel group enables sudo access
extraGroups = [ "wheel" "docker" ];
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMniNzAzuI527bfk/EipqFILFayUCwYXDoZ3R7+QgYq6 kawaiipunk@ZeroCool" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMniNzAzuI527bfk/EipqFILFayUCwYXDoZ3R7+QgYq6 kawaiipunk@ZeroCool"
]; ];