• probablymissing@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    8 hours ago

    as a nixos enjoyer, i have no idea how to setup ssh keys. fail2ban and a regular password for me.

    yes, i have locked myself out of my own server for hours at a time because i’m an absolute tool.

    • smiletolerantly@awful.systems
      link
      fedilink
      arrow-up
      1
      ·
      2 hours ago

      Ehm… I’m also on Nixos and I’d say it’s super trivial.

      services.openssh = {
        enable = true;
        settings = {
          PasswordAuthentication = false;
          PermitRootLogin = "no";
        };
      };
      
      users.users.<name>.openssh.authorizedKeys.keys = [ list of pubkeys ideally read from file in repo ];