squibid/flake-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

more secure servers

Browse source
This commit is contained in:
Squibid 2025-11-25 10:25:47 -05:00
parent fbf624a445
commit 37fa6c9f05
Signed by: squibid
GPG key ID: BECE5684D3C4005D
3 changed files with 27 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
modules/ssh.nix
View file

@ -20,7 +20,12 @@
services.sshguard.enable = true;
services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
settings = {
KbdInteractiveAuthentication = false;
PasswordAuthentication = false;
UseDns = false;
X11Forwarding = false;
};
};
users.users.root.openssh.authorizedKeys.keys = config.ssh.keys;