From d838e98426672f09b6fdcd5f825c5a5706d90bd3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kieran.meinhardt@gmail.com>
Date: Sun, 27 Jan 2019 15:50:46 +0100
Subject: [PATCH] remove ssh password auth

---
 configs/networks.nix | 21 ++++++++++++++-------
 1 file changed, 14 insertions(+), 7 deletions(-)

diff --git a/configs/networks.nix b/configs/networks.nix
index cfe9666..b38bc8f 100644
--- a/configs/networks.nix
+++ b/configs/networks.nix
@@ -1,11 +1,12 @@
 { pkgs, config, lib, ... }:
-{
+let sshPort = 22022;
+in {
   networking.hosts = lib.mapAttrs (_: value: [ (value + ".local") ]) {
-    "192.168.178.21" = "scardanelli";
-    "192.168.178.27" = "printer";
     "192.168.178.1" = "router";
-    "192.168.178.24" = "lestrade";
+    "192.168.178.21" = "scardanelli";
     "192.168.178.22" = "homeros";
+    "192.168.178.24" = "lestrade";
+    "192.168.178.27" = "printer";
   } // {
     "42:0:ca48:f98f:63d7:31ce:922b:245d" = [ "go" ];
   };
@@ -43,12 +44,12 @@
         scardanelli = {
           hostname = "scardanelli.local";
           user = "kfm";
-          port = 10022;
+          port = sshPort;
         };
         homeros = {
           hostname = "homeros.local";
           user = "kfm";
-          port = 10022;
+          port = sshPort;
         };
       };
     };
@@ -61,11 +62,17 @@
   };
 
   services.openssh = {
-    ports = [ 10022 ];
+    ports = [ sshPort ];
     enable = true;
     forwardX11 = true;
+    passwordAuthentication = false;
   };
 
+  users.users.kfm.openssh.authorizedKeys.keys = [
+    "ssh-rsa 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 kieran.meinhardt@gmail.com" # homeros
+    "ssh-rsa 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 kieran.meinhardt@gmail.com" # scardanelli
+  ];
+
   networking.retiolum = {
     scardanelli = {
       ipv4 = "10.243.2.2";