+7 -1

modules/server/sshd.nix

reviewed

··· 11 11 description = "Whether to enable SSH server."; 12 12 type = types.bool; 13 13 }; 14 14 + 15 15 + allowUsers = mkOption { 16 16 + default = [ user ]; 17 17 + description = "Users allowed to log in via SSH."; 18 18 + type = types.listOf types.str; 19 19 + }; 14 20 }; 15 21 16 22 config = mkIf cfg.sshd.enable { ··· 44 50 AllowTcpForwarding = false; 45 51 X11Forwarding = false; 46 52 AllowStreamLocalForwarding = false; 47 47 - AllowUsers = [ user ]; 53 53 + AllowUsers = cfg.sshd.allowUsers; 48 54 }; 49 55 }; 50 56 };

+1 -6

modules/server/tangled.nix

reviewed

··· 38 38 }; 39 39 }; 40 40 41 41 - openssh.settings = let 42 42 - user = config.services.tangled.knot.gitUser; 43 43 - in { 44 44 - AllowUsers = [ user ]; 45 45 - AllowGroups = [ user ]; 46 46 - }; 41 41 + modules.server.sshd.allowUsers = [ config.services.tangled.knot.gitUser ]; 47 42 }; 48 43 49 44 programs.git = {