Initial commit

2025-12-01 13:23:24 +07:00 · 2025-12-01 13:23:24 +07:00 · cfcc57a8bd
commit cfcc57a8bd
353 changed files with 18756 additions and 0 deletions
--- a/module/aspect/ssh/ssh-server.nix
+++ b/module/aspect/ssh/ssh-server.nix
@ -0,0 +1,44 @@
+{
+  den.aspects = {
+    ssh-server = {
+      nixos = {
+        services = {
+          openssh = {
+            enable = true;
+            openFirewall = true;
+            settings = {
+              X11Forwarding = false;
+              PasswordAuthentication = false;
+              KbdInteractiveAuthentication = false;
+              PermitRootLogin = "prohibit-password";
+              KexAlgorithms = [
+                "mlkem768x25519-sha256"
+                "sntrup761x25519-sha512"
+                "sntrup761x25519-sha512@openssh.com"
+                "curve25519-sha256"
+                "curve25519-sha256@libssh.org"
+                "diffie-hellman-group-exchange-sha256"
+                "diffie-hellman-group18-sha512"
+                "diffie-hellman-group16-sha512"
+              ];
+            };
+            extraConfig = ''
+              PubkeyAcceptedAlgorithms ssh-ed25519,rsa-sha2-512,rsa-sha2-256
+              StreamLocalBindUnlink yes
+              AllowUsers kirbara
+            '';
+          };
+        };
+        programs = {
+          ssh = {
+            hostKeyAlgorithms = [
+              "ssh-ed25519"
+              "rsa-sha2-512"
+              "rsa-sha2-256"
+            ];
+          };
+        };
+      };
+    };
+  };
+}