This commit is contained in:
parent
5ba1651350
commit
2245825774
|
@ -27,8 +27,8 @@ in {
|
|||
# https://xeiaso.net/blog/paranoid-nixos-2021-07-18
|
||||
|
||||
# Don't set this if you need sftp
|
||||
services.openssh.allowSFTP = false;
|
||||
services.openssh.openFirewall = false; # Lock yourself out
|
||||
services.openssh.settings.AllowSFTP = false;
|
||||
|
||||
# Limit the use of sudo to the group wheel
|
||||
security.sudo.execWheelOnly = true;
|
||||
|
|
Loading…
Reference in a new issue