From b01725eb25f21d55d58862ae38733b0ada99b673 Mon Sep 17 00:00:00 2001
From: Jasper Ras <jras@hostnet.nl>
Date: Sun, 16 Feb 2025 11:28:10 +0100
Subject: impermanence preps

---
 modules/snorlax/networking.nix | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

(limited to 'modules/snorlax/networking.nix')

diff --git a/modules/snorlax/networking.nix b/modules/snorlax/networking.nix
index daca7af..315a4c2 100644
--- a/modules/snorlax/networking.nix
+++ b/modules/snorlax/networking.nix
@@ -1,7 +1,30 @@
-{ ... }:
+{ lib, ... }:
 {
   networking.hostName = "snorlax";
   networking.hostId = "1d1ebf34";
+
+  programs.mtr.enable = true;
+  services.openssh = {
+    enable = true;
+    allowSFTP = false;
+    settings = {
+      PermitRootLogin = "no";
+      AllowUsers = [ "jras" ];
+    };
+    openFirewall = lib.mkForce true;
+    hostKeys = [
+      {
+        path = "/persist/etc/ssh/ssh_host_ed25519_key";
+        type = "ed25519";
+      }
+      {
+        path = "/persist/etc/ssh/ssh_host_rsa_key";
+        type = "rsa";
+        bits = 4096;
+      }
+    ];
+  };
+
   # networking.useNetworkd = true;
 
   # systemd.network.enable = true;
-- 
cgit v1.2.3