+1 -1

nix/home/modules/default.nix

reviewed

··· 57 57 nixd.enable = lib.mkDefault true; 58 58 }; 59 59 nix.enable = lib.mkDefault true; 60 60 - security.enable = lib.mkDefault true; 61 60 scripts.enable = lib.mkDefault true; 61 61 + security.enable = lib.mkDefault true; 62 62 ssh.enable = lib.mkDefault true; 63 63 }; 64 64

+3 -1

nix/home/modules/ssh/default.nix

reviewed

··· 1 1 { 2 2 config, 3 3 lib, 4 4 + osConfig ? {}, 4 5 ... 5 6 }: let 6 7 cfg = config.my.ssh; 7 8 in { 8 9 options.my.ssh.enable = 9 9 - lib.mkEnableOption "SSH tweaks"; 10 10 + lib.mkEnableOption "SSH tweaks" 11 11 + // {default = osConfig.my.ssh.enable or false;}; 10 12 11 13 config = lib.mkIf cfg.enable { 12 14 programs.ssh = {

+3 -3

nix/legacyPackages/ciMatrix.nix

reviewed

··· 69 69 }; 70 70 in { 71 71 legacyPackages.ciMatrix = 72 72 - pkgs.writeText 73 73 - "ci-matrix" 74 74 - (builtins.toJSON ciInfo); 72 72 + ciInfo 73 73 + |> builtins.toJSON 74 74 + |> (pkgs.writeText "ci-matrix"); 75 75 }; 76 76 }

+1

nix/nixos/modules/default.nix

reviewed

··· 54 54 nix.enable = mkDefault true; 55 55 pipewire.enable = mkDefault true; 56 56 security.enable = mkDefault true; 57 57 + ssh.enable = mkDefault true; 57 58 theming.enable = mkDefault true; 58 59 users.enable = mkDefault true; 59 60 zram.enable = mkDefault true;

+3 -1

nix/nixos/modules/ssh/default.nix

reviewed

··· 13 13 allowSFTP = true; 14 14 openFirewall = true; 15 15 settings = { 16 16 + AddKeysToAgent = lib.mkDefault true; 17 17 + AllowAgentForwarding = lib.mkDefault false; 16 18 PasswordAuthentication = lib.mkDefault false; 17 17 - PermitRootLogin = lib.mkDefault "no"; 19 19 + PermitRootLogin = lib.mkDefault false; 18 20 }; 19 21 }; 20 22 };