notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

ssh: force login methods

Browse source
This commit is contained in:
notohh 2023-05-01 03:33:33 -04:00
parent 6375b59ce8
commit 2d22e26ee2
Signed by: notohh
GPG key ID: BD47506D475EE86D
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
modules/openssh.nix
View file

@ -1,11 +1,11 @@
{...}: { {lib, ...}: {
services.openssh = { services.openssh = {
enable = true; enable = true;
settings = { settings = {
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
PasswordAuthentication = false; PasswordAuthentication = lib.mkForce false;
PubkeyAuthentication = true; PubkeyAuthentication = true;
PermitRootLogin = "no"; PermitRootLogin = lib.mkForce "no";
StreamLocalBindUnlink = "yes"; StreamLocalBindUnlink = "yes";
GatewayPorts = "clientspecified"; GatewayPorts = "clientspecified";
}; };