feat(ssh): add enable option

2026-05-22 10:23:22 +02:00
parent a5adea70ea
commit 086e091add
8 changed files with 93 additions and 70 deletions
--- a/modules/ssh/default.nix
+++ b/modules/ssh/default.nix
@@ -1,10 +1,17 @@
-{ lib, ... }:
+{ lib, config, ... }:

+let
+  cfg = config.ssh;
+in
 {
  imports = [ ./hardened-openssh.nix ];

-  config.services.openssh = {
-    enable = lib.mkDefault true;
-    harden = lib.mkDefault true;
+  options.ssh.enable = lib.mkEnableOption "SSH server";
+
+  config = lib.mkIf cfg.enable {
+    services.openssh = {
+      enable = lib.mkDefault true;
+      harden = lib.mkDefault true;
+    };
  };
 }