qbit/xin
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

configs/ssh: disable Pam in the module too, fmt global params

Browse Source
This commit is contained in:
Aaron Bieber 2024-07-01 16:47:37 -06:00
parent 6633b2ec8d
commit d5ace8a093
No known key found for this signature in database
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
configs/ssh.nix
View File

@ -28,9 +28,9 @@ in
controlmaster auto controlmaster auto
controlpath /tmp/ssh-%r@%h:%p controlpath /tmp/ssh-%r@%h:%p
VerifyHostKeyDNS yes VerifyHostKeyDNS yes
AddKeysToAgent 90m AddKeysToAgent 90m
CanonicalizeHostname always CanonicalizeHostname always
''; '';
}; };
}; };
@ -42,6 +42,7 @@ in
TrustedUserCAKeys = /etc/ssh/ca.pub TrustedUserCAKeys = /etc/ssh/ca.pub
''; '';
settings = { settings = {
UsePAM = false;
PrintMotd = true; PrintMotd = true;
PermitRootLogin = "prohibit-password"; PermitRootLogin = "prohibit-password";
PasswordAuthentication = false; PasswordAuthentication = false;