From baeb144e571c3235739a4882081e0e38e2405c6a Mon Sep 17 00:00:00 2001
From: Pacman99 <pachum99@gmail.com>
Date: Thu, 13 May 2021 11:04:15 -0700
Subject: [PATCH] profiles/core: enable ssh by default for keys

---
 profiles/core/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/profiles/core/default.nix b/profiles/core/default.nix
index 41b5136e..9e98ba6b 100644
--- a/profiles/core/default.nix
+++ b/profiles/core/default.nix
@@ -143,6 +143,12 @@ in
     '';
   };
 
+  # For rage encryption, all hosts need a ssh key pair
+  services.openssh = {
+    enable = true;
+    openFirewall = lib.mkDefault false;
+  };
+
   services.earlyoom.enable = true;
 
 }