aboutsummaryrefslogtreecommitdiff
path: root/tw/system/lap.scm
diff options
context:
space:
mode:
Diffstat (limited to 'tw/system/lap.scm')
-rw-r--r--tw/system/lap.scm11
1 files changed, 10 insertions, 1 deletions
diff --git a/tw/system/lap.scm b/tw/system/lap.scm
index f6e56116..e3037d61 100644
--- a/tw/system/lap.scm
+++ b/tw/system/lap.scm
@@ -29,7 +29,8 @@
kerberos linux mtools pulseaudio search shells tls wm xorg)
(use-service-modules admin authentication avahi base cups dbus desktop docker
- kerberos linux mcron networking pm shepherd syncthing vpn xorg)
+ kerberos linux mcron networking pm shepherd ssh syncthing
+ vpn xorg)
(define efi-system-partition ; /dev/nvme0n1p1
(uuid "E04A-DF05" 'fat))
@@ -452,6 +453,14 @@ EndSection
(secrets-configuration
(host-key "/etc/secrets.key"))) ; we have no SSH host keys, so use a custom key
+ (service openssh-service-type
+ (openssh-configuration
+ (x11-forwarding? #t)
+ (permit-root-login #f)
+ (password-authentication? #f)
+ (authorized-keys
+ `(("timo" ,(local-file "files/timo.pub"))))))
+
(modify-services (append %system-channel-services %desktop-services)
;; Let sane find the airscan backend. ipp-usb needs to be running separately.
(sane-service-type _ => sane-backends/airscan)