teutat3s/os
2
0
Fork 0
forked from pub-solar/os
Code Pull requests Activity

core: disable SSH passwordAuthentication by default

Browse source
This commit is contained in:
teutat3s 2022-10-05 11:58:26 +02:00
parent f28d05e24e
commit d43bd80580
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
2 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
modules/core/services.nix
View file

@ -7,6 +7,7 @@
# If you don't want the host to have SSH actually opened up to the net, # If you don't want the host to have SSH actually opened up to the net,
# set `services.openssh.openFirewall` to false in your config. # set `services.openssh.openFirewall` to false in your config.
openFirewall = lib.mkDefault true; openFirewall = lib.mkDefault true;
passwordAuthentication = false;
}; };
# Service that makes Out of Memory Killer more effective # Service that makes Out of Memory Killer more effective

1
modules/paranoia/default.nix
View file

@ -39,7 +39,6 @@ in
# fileSystems."/".options = [ "noexec" ]; # fileSystems."/".options = [ "noexec" ];
services.openssh = { services.openssh = {
passwordAuthentication = false;
kbdInteractiveAuthentication = false; kbdInteractiveAuthentication = false;
extraConfig = '' extraConfig = ''
AllowTcpForwarding yes AllowTcpForwarding yes