Add more SSH settings

README.md

@@ -45,9 +45,13 @@ Example JSON config:
     },
     "timezone": "Europe/Moscow",
     "resticPassword": "PASS",
+    "ssh": {
+        "enable": true,
         "rootSshKeys": [
             "ssh-ed25519 KEY user@host"
         ],
+        "passwordAuthentication": true
+    },
     "username": "owner",
     "users": [
         {

configuration.nix

@@ -37,10 +37,10 @@
   };
   time.timeZone = config.services.userdata.timezone;
   i18n.defaultLocale = "en_GB.UTF-8";
-  users.users.root.openssh.authorizedKeys.keys = config.services.userdata.rootSshKeys;
+  users.users.root.openssh.authorizedKeys.keys = config.services.userdata.ssh.rootKeys;
   services.openssh = {
-    enable = true;
+    enable = config.services.userdata.ssh.enable;
-    passwordAuthentication = true;
+    passwordAuthentication = config.services.userdata.ssh.passwordAuthentication;
     permitRootLogin = "yes";
     openFirewall = false;
   };

userdata/schema.json

@@ -103,12 +103,23 @@
         "resticPassword": {
             "type": "string"
         },
-        "rootSshKeys": {
+        "ssh": {
+            "type": "object",
+            "properties": {
+                "enable": {
+                    "type": "boolean"
+                },
+                "rootKeys": {
                     "type": "array",
                     "items": {
                         "type": "string"
                     }
                 },
+                "passwordAuthentication": {
+                    "type": "boolean"
+                }
+            }
+        },
         "users": {
             "type": "array",
             "items": {

variables-module.nix

@@ -117,12 +117,25 @@ in
       '';
       type = types.nullOr types.string;
     };
-    rootSshKeys = mkOption {
+    ssh = {
+      enable = mkOption {
+        default = true;
+        type = types.nullOr types.bool;
+      };
+      rootKeys = mkOption {
         description = ''
         Root SSH Keys
         '';
         type = types.nullOr (types.listOf types.string);
       };
+      passwordAuthentication = mkOption {
+        description = ''
+          Password authentication for SSH
+        '';
+        default = true;
+        type = types.nullOr types.bool;
+      };
+    };
     timezone = mkOption {
       description = ''
         Timezone used by the server