emelie/nix-deploy
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Wiki Activity

Add various changes

Browse source
This commit is contained in:
Emelie Graven 2022-02-26 16:09:12 +01:00
parent 00734e521f
commit f58e968756
Signed by: emelie
GPG key ID: C11123726DBB55A1
10 changed files with 77 additions and 76 deletions
Download patch file Download diff file Expand all files Collapse all files

5
config/common/services/ssh.nix
View file

@ -1,13 +1,14 @@
{ ... }:
{ config, ... }:
{
services.openssh = {
enable = true;
permitRootLogin = "no";
passwordAuthentication = false;
challengeResponseAuthentication = false;
hostKeys = [ { "path" = "/etc/ssh/ssh_host_ed25519_key"; "type" = "ed25519"; } ];
hostKeys = [ { path = config.secrets.files.ssh_host_ed25519_key.file; type = "ed25519"; } ];
kexAlgorithms = [ "curve25519-sha256" "curve25519-sha256@libssh.org" ];
macs = [ "hmac-sha2-512-etm@openssh.com" "hmac-sha2-512-etm@openssh.com" "umac-128-etm@openssh.com" ];
};
programs.ssh.knownHosts = {