From 57edf6fec41abf571d637b09bd4132f858106381 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Tue, 5 Apr 2022 17:13:25 -0700
Subject: ssh: refactor to a module

Also install mosh and ensure the firewall opens the correct ports.
---
 modules/services/ssh-server/default.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 modules/services/ssh-server/default.nix

(limited to 'modules/services/ssh-server')

diff --git a/modules/services/ssh-server/default.nix b/modules/services/ssh-server/default.nix
new file mode 100644
index 0000000..ce5d4c8
--- /dev/null
+++ b/modules/services/ssh-server/default.nix
@@ -0,0 +1,17 @@
+{ ... }: {
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "yes";
+    passwordAuthentication = false;
+  };
+
+  programs.mosh.enable = true;
+
+  networking.firewall.allowedTCPPorts = [ 22 ];
+
+  # Relevant ports for mosh
+  networking.firewall.allowedUDPPortRanges = [{
+    from = 6000;
+    to = 6100;
+  }];
+}
-- 
cgit 1.4.1