nixos/profiles/server/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{ config, pkgs, ... }:

{
  imports = [
    ../common
  ];

  services = {
    openssh = {
      enable = true;
      settings = {
        PasswordAuthentication = false;
      };
    };
  };

  security.sudo.wheelNeedsPassword = false;

  # For remote rebuilds with --target-host.
  nix.settings.trusted-users = ["@wheel"];
}