specCon18/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

mighrate with lib to narrow scope

Browse source
This commit is contained in:
arouzing 2023-02-02 18:18:00 -05:00
parent bb3935bdb7
commit 9496f06b87
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

14
.modules/services/openssh.nix
View file

@ -1,16 +1,18 @@
_: { config, pkgs, lib, ... }: { config, pkgs, lib, ... }:
{ {
services.openssh = { services.openssh = lib.mkDefault {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
settings = lib.mkDefault {
passwordAuthentication = false;
permitRootLogin = "no";
kbdInteractiveAuthentication = false;
};
startWhenNeeded = true; startWhenNeeded = true;
kexAlgorithms = [ "curve25519-sha256@libssh.org" ]; kexAlgorithms = [ "curve25519-sha256@libssh.org" ];
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
permitRootLogin = "no";
}; };
security.pam = mkDefault{ security.pam = lib.mkDefault {
enableSSHAgentAuth = true; enableSSHAgentAuth = true;
services.sudo.sshAgentAuth = true; services.sudo.sshAgentAuth = true;
}; };