foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 04:58:01 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

profiles/server: convert part of OpenSSH config to settings attribute

Browse Source
This commit is contained in:
Gabriel Arazas 2023-01-29 12:03:44 +08:00
parent e5066837bf
commit 5d23c751f3
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/nixos/profiles/server.nix
View File

@ -31,12 +31,14 @@ in
services.openssh = lib.mkDefault {
enable = true;
# Both are good for hardening as it only requires the keyfiles.
passwordAuthentication = false;
permitRootLogin = "no";
settings = {
# Making it verbose for services such as fail2ban.
logLevel = "VERBOSE";
LogLevel = "VERBOSE";
# Both are good for hardening as it only requires the keyfiles.
PasswordAuthentication = "no";
PermitRootLogin = "no";
};
};
# Manage your servers like a Linux-using basement dweller with their