cryodev/hosts/cryodev-main/services
steffen 92abe2574d enable root SSH key-only login for deploy-rs
- Change PermitRootLogin from 'no' to 'prohibit-password' (key-only)
- Add forgejo-deploy public key to root's authorized_keys
- Revert deploy-rs user back to root (needs root for activation)

Root can only login via SSH key, password auth remains disabled.
2026-03-14 14:13:26 +01:00
..
default.nix fix forgejo-runner token: use SOPS template with TOKEN= prefix 2026-03-14 12:43:07 +01:00
forgejo-runner.nix fix forgejo-runner: use local URL instead of public FQDN 2026-03-14 12:52:46 +01:00
forgejo.nix split forgejo-runner into own service file for staged deployment 2026-03-14 12:22:33 +01:00
headplane.nix fix headplane: disable strict config validation 2026-03-14 13:25:59 +01:00
headscale.nix Add SD image pipeline, documentation overhaul, and fix module issues 2026-03-11 08:41:58 +01:00
mailserver.nix Add SD image pipeline, documentation overhaul, and fix module issues 2026-03-11 08:41:58 +01:00
netdata.nix Initial commit 2026-03-06 08:31:13 +01:00
nginx.nix Initial commit 2026-03-06 08:31:13 +01:00
openssh.nix enable root SSH key-only login for deploy-rs 2026-03-14 14:13:26 +01:00
sops.nix split forgejo-runner into own service file for staged deployment 2026-03-14 12:22:33 +01:00
tailscale.nix Initial commit 2026-03-06 08:31:13 +01:00