nixos

commit 92eef93db8c730ef7a4fc175839c8c9d3c63abec
parent 92a49848b11d997388c7e5454e183d523aba351c
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed,  9 Aug 2023 16:25:54 +0200

Ensure order of operation

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
24
++++++++++++------------

1 file changed, 12 insertions(+), 12 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -150,6 +150,18 @@
   };
 
 
+  # This setups a SSH server. Very important if you're setting up a headless system.
+  # Feel free to remove if you don't need it.
+  services.openssh = {
+    enable = true;
+    settings = {
+      # Forbid root login through SSH.
+      PermitRootLogin = "no";
+      # Use keys only. Remove if you want to SSH using password (not recommended)
+      PasswordAuthentication = false;
+    };
+  };
+
   # SOPS
   sops.age.sshKeyPaths = [ "/persist/etc/ssh/ssh_host_ed25519_key" ];
   # This is using an age key that is expected to already be in the filesystem
@@ -199,18 +211,6 @@
 
   users.users."root".passwordFile = config.sops.secrets.root_initial_password.path;
 
-  # This setups a SSH server. Very important if you're setting up a headless system.
-  # Feel free to remove if you don't need it.
-  services.openssh = {
-    enable = true;
-    settings = {
-      # Forbid root login through SSH.
-      PermitRootLogin = "no";
-      # Use keys only. Remove if you want to SSH using password (not recommended)
-      PasswordAuthentication = false;
-    };
-  };
-
   # Darling Erasure
   environment.etc = {
     nixos.source = "/persist/etc/nixos";