porthos: services: extract ssh-server

porthos/services.nix

@@ -35,6 +35,8 @@ in
     rss-bridge.enable = true;
     # Usenet client
     sabnzbd.enable = true;
+    # Because I stilll need to play sysadmin
+    ssh-server.enable = true;
     # Torrent client and webui
     transmission = {
       enable = true;
@@ -47,11 +49,4 @@ in
     enable = true;
     enableSSHSupport = true;
   };
-
-  programs.mosh.enable = true; # Opens the relevant UDP ports.
-
-  # Enable the OpenSSH daemon.
-  services.openssh.enable = true;
-  services.openssh.permitRootLogin = "no";
-  services.openssh.passwordAuthentication = false;
 }

services/default.nix

@@ -14,6 +14,7 @@
     ./quassel.nix
     ./rss-bridge.nix
     ./sabnzbd.nix
+    ./ssh-server.nix
     ./transmission.nix
   ];
 }

services/ssh-server.nix

@@ -0,0 +1,23 @@
+# An SSH server, using 'mosh'
+{ config, lib, ... }:
+let
+  cfg = config.my.services.ssh-server;
+in
+{
+  options.my.services.ssh-server = {
+    enable = lib.mkEnableOption "SSH Server using 'mosh'";
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.openssh = {
+      # Enable the OpenSSH daemon.
+      enable = true;
+      # Be more secure
+      permitRootLogin = "no";
+      passwordAuthentication = false;
+    };
+
+    # Opens the relevant UDP ports.
+    programs.mosh.enable = true;
+  };
+}