qbit/xin
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

all: remove multi-entry knownHosts file, enable CA

Browse Source
This commit is contained in:
Aaron Bieber 2023-06-06 06:36:01 -06:00
parent 2a08d624e8
commit 29c2781ca8
No known key found for this signature in database
1 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
default.nix
View File

@ -208,14 +208,8 @@ in {
services = {
openssh = {
enable = true;
knownHosts = {
"*.bold.daemon,*.humpback-trout.ts.net,*.suah.dev" = {
publicKeyFile = caPubKeyFile;
certAuthority = true;
};
};
extraConfig = ''
#TrustedUserCAKeys = /etc/ssh/ca.pub
TrustedUserCAKeys = /etc/ssh/ca.pub
'';
settings = {
PermitRootLogin = "prohibit-password";