foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 10:58:02 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

profiles/server: convert part of OpenSSH config to settings attribute

Browse Source
This commit is contained in:
Gabriel Arazas 2023-01-29 12:03:44 +08:00
parent e5066837bf
commit 5d23c751f3
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/nixos/profiles/server.nix
View File

@ -31,12 +31,14 @@ in
services.openssh = lib.mkDefault { services.openssh = lib.mkDefault {
enable = true; enable = true;
# Both are good for hardening as it only requires the keyfiles. settings = {
passwordAuthentication = false;
permitRootLogin = "no";
# Making it verbose for services such as fail2ban. # Making it verbose for services such as fail2ban.
logLevel = "VERBOSE"; LogLevel = "VERBOSE";
# Both are good for hardening as it only requires the keyfiles.
PasswordAuthentication = "no";
PermitRootLogin = "no";
};
}; };
# Manage your servers like a Linux-using basement dweller with their # Manage your servers like a Linux-using basement dweller with their