refactor(hosts): use modules/ssh with sensible defaults

2026-03-11 14:49:23 +01:00
parent b9bdd36a05
commit 828b5d7374
8 changed files with 11 additions and 64 deletions
--- a/hosts/eetion/default.nix
+++ b/hosts/eetion/default.nix
@@ -10,7 +10,7 @@ in
 {
  imports = [
    ./hard.nix
-    ../../modules/ssh/hardened-openssh.nix
+    ../../modules/ssh
  ];

  ssh = {
@@ -52,11 +52,6 @@ in
  security.sudo.wheelNeedsPassword = false;

  services = {
-    openssh = {
-      enable = true;
-      harden = true;
-    };
-
    paperless = {
      enable = true;
      passwordFile = "/etc/paperless-admin-pass";