mirror of
https://github.com/hyprwm/hyprland-infra.git
synced 2025-05-13 05:40:39 +01:00
modules/openssh: harden
This commit is contained in:
parent
14f2d11c75
commit
3d9b446c98
1 changed files with 9 additions and 1 deletions
|
@ -1,8 +1,16 @@
|
|||
{
|
||||
{lib, ...}: let
|
||||
inherit (lib.modules) mkForce;
|
||||
in {
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
|
||||
# since this is a VM, use a separate port than the host's
|
||||
ports = [2222];
|
||||
|
||||
settings = {
|
||||
PasswordAuthentication = mkForce false;
|
||||
KexAlgorithms = mkForce ["sntrup761x25519-sha512@openssh.com"];
|
||||
KbdInteractiveAuthentication = mkForce false;
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue