From 8c84a76f6e66688588ca8466348d2c2cc5c082a9 Mon Sep 17 00:00:00 2001
From: Tom <tte@blubb.fish>
Date: Wed, 7 Aug 2024 21:54:03 +0200
Subject: [PATCH] Openssh and nginx

---
 configuration.nix | 19 +++++++++++++------
 1 file changed, 13 insertions(+), 6 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index 7d8710e..c853fbf 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -63,6 +63,7 @@
     curl
     git
     nginx
+    acme
   ];
 
   # Some programs need SUID wrappers, can be configured further or are
@@ -76,13 +77,19 @@
   # List services that you want to enable:
 
   # Enable the OpenSSH daemon.
-  services.openssh.enable = true;
-  services.nginx.enable = true;
+  services.openssh = {
+    enable = true;
+    settings.PermitRootLogin = "without-password";
+  };
+  # services.nginx.enable = false;
   
-  services.nginx.virtualHosts."git.blubb.fish" = {
-    addSSL = true;
-    enableACME = true;
-    locations."/".proxyPass = "http://10.0.0.24:3000/";
+  services.nginx = {
+    enable = false;
+    virtualHosts."git.blubb.fish" = {
+      addSSL = true;
+      enableACME = true;
+      locations."/".proxyPass = "http://10.0.0.24:3000/";
+    };
   };
   security.acme = {
   acceptTerms = true;