fix: cloudflare tunnel on tempest

requires openssh, but removing public key
This commit is contained in:
Noah Masur
2023-07-12 23:33:35 -04:00
parent d14054ab17
commit e86b2f184f
4 changed files with 5 additions and 3 deletions

View File

@ -13,9 +13,8 @@
};
};
config = lib.mkIf (config.publicKey != null) {
config = lib.mkIf config.services.openssh.enable {
services.openssh = {
enable = true;
ports = [ 22 ];
allowSFTP = true;
settings = {
@ -27,7 +26,7 @@
};
users.users.${config.user}.openssh.authorizedKeys.keys =
[ config.publicKey ];
lib.mkIf (config.publicKey != null) [ config.publicKey ];
# Implement a simple fail2ban service for sshd
services.sshguard.enable = true;