cleo-darwin: enable ssh

2026-08-08 13:24:27 -04:00
parent 7fb8488730
commit 2be7c85e8d
6 changed files with 21 additions and 2 deletions
@@ -90,6 +90,16 @@ in
    home = "/Users/matthew.bessette";
  };

+  services.openssh = {
+    enable = true;
+    extraConfig = ''
+      StrictModes no
+      # Deny everyone by default unless they match the subnet rule
+      Match Address !192.168.0.0/16
+        DenyUsers *
+    '';
+  };
+
  # Homebrew for Casks and specific binaries
  # In a nix-darwin setup, Homebrew packages are not actually stored inside the Nix store.
  # Instead, nix-darwin acts as a manager that triggers the standard Homebrew installation