ssh config for git

2026-03-14 21:05:58 +01:00
parent c07acb5268
commit e609400d4e
2 changed files with 12 additions and 1 deletions
--- a/systems/amd-server-vm/configuration.nix
+++ b/systems/amd-server-vm/configuration.nix
@@ -157,6 +157,17 @@
    };
  };

+  services.openssh.extraConfig = ''
+    # Internal network: allow everyone
+    Match Address 192.168.2.0/24,192.168.0.0/24
+        AllowUsers *
+
+    # Everything else (internet): only git user
+    Match Address *,!192.168.2.0/24,!192.168.0.0/24
+        PermitRootLogin no
+        AllowUsers gitea
+  '';
+
  virtualisation.vmware.guest.enable = true;
  services.xserver.videoDrivers = [ "vmware" ];
  environment.systemPackages = with pkgs; [