From 74d062033463d2dca88e39e5769b09b60b38709d Mon Sep 17 00:00:00 2001
From: Simon Gardling <titaniumtown@proton.me>
Date: Fri, 12 Dec 2025 21:18:51 -0500
Subject: [PATCH] ssh: fix ssh_host_key perms

---
 services/ssh.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/ssh.nix b/services/ssh.nix
index 71646ef..9f15931 100644
--- a/services/ssh.nix
+++ b/services/ssh.nix
@@ -21,6 +21,7 @@
 
   systemd.tmpfiles.rules = [
     "Z /etc/ssh 755 root root"
+    "Z /etc/ssh/ssh_host_* 600 root root"
   ];
 
   users.users.${username}.openssh.authorizedKeys.keys = [