foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 04:58:01 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

profiles/server: convert part of OpenSSH config to settings attribute

Browse Source
This commit is contained in:
Gabriel Arazas 2023-01-29 12:03:44 +08:00
parent e5066837bf
commit 5d23c751f3
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/nixos/profiles/server.nix
View File

@ -31,12 +31,14 @@ in
services.openssh = lib.mkDefault { services.openssh = lib.mkDefault {
enable = true; enable = true;
# Both are good for hardening as it only requires the keyfiles. settings = {
passwordAuthentication = false; # Making it verbose for services such as fail2ban.
permitRootLogin = "no"; LogLevel = "VERBOSE";
# Making it verbose for services such as fail2ban. # Both are good for hardening as it only requires the keyfiles.
logLevel = "VERBOSE"; PasswordAuthentication = "no";
PermitRootLogin = "no";
};
}; };
# Manage your servers like a Linux-using basement dweller with their # Manage your servers like a Linux-using basement dweller with their