profiles/core: enable ssh by default for keys

2021-05-13 11:04:15 -07:00 · 2021-05-13 11:04:15 -07:00 · baeb144e57
commit baeb144e57
parent 2f474e37f7
1 changed files with 6 additions and 0 deletions
--- a/profiles/core/default.nix
+++ b/profiles/core/default.nix
@ -143,6 +143,12 @@ in
    '';
  };

+  # For rage encryption, all hosts need a ssh key pair
+  services.openssh = {
+    enable = true;
+    openFirewall = lib.mkDefault false;
+  };
+
  services.earlyoom.enable = true;

 }