diff options
Diffstat (limited to 'tw')
| -rw-r--r-- | tw/system/frm.scm | 11 | ||||
| -rw-r--r-- | tw/system/lap.scm | 11 |
2 files changed, 20 insertions, 2 deletions
diff --git a/tw/system/frm.scm b/tw/system/frm.scm index 9d5c815d..e52ff1a1 100644 --- a/tw/system/frm.scm +++ b/tw/system/frm.scm @@ -29,7 +29,8 @@ kerberos linux mtools pulseaudio search shells tls wm xorg) (use-service-modules admin authentication avahi base cups dbus desktop docker - kerberos linux mcron networking pm shepherd syncthing vpn xorg) + kerberos linux mcron networking pm shepherd ssh syncthing + vpn xorg) (define efi-system-partition ; /dev/nvme0n1p1 (uuid "D8C7-2624" 'fat)) @@ -321,6 +322,14 @@ These are actually Mediatek MT7922 chips.") (secrets-configuration (host-key "/etc/secrets.key"))) ; we have no SSH host keys, so use a custom key + (service openssh-service-type + (openssh-configuration + (x11-forwarding? #t) + (permit-root-login #f) + (password-authentication? #f) + (authorized-keys + `(("timo" ,(local-file "files/timo.pub")))))) + (modify-services (append %system-channel-services %desktop-services) ;; Let sane find the airscan backend. ipp-usb needs to be running separately. (sane-service-type _ => sane-backends/airscan) diff --git a/tw/system/lap.scm b/tw/system/lap.scm index f6e56116..e3037d61 100644 --- a/tw/system/lap.scm +++ b/tw/system/lap.scm @@ -29,7 +29,8 @@ kerberos linux mtools pulseaudio search shells tls wm xorg) (use-service-modules admin authentication avahi base cups dbus desktop docker - kerberos linux mcron networking pm shepherd syncthing vpn xorg) + kerberos linux mcron networking pm shepherd ssh syncthing + vpn xorg) (define efi-system-partition ; /dev/nvme0n1p1 (uuid "E04A-DF05" 'fat)) @@ -452,6 +453,14 @@ EndSection (secrets-configuration (host-key "/etc/secrets.key"))) ; we have no SSH host keys, so use a custom key + (service openssh-service-type + (openssh-configuration + (x11-forwarding? #t) + (permit-root-login #f) + (password-authentication? #f) + (authorized-keys + `(("timo" ,(local-file "files/timo.pub")))))) + (modify-services (append %system-channel-services %desktop-services) ;; Let sane find the airscan backend. ipp-usb needs to be running separately. (sane-service-type _ => sane-backends/airscan) |