modules/openssh: harden

This commit is contained in:
NotAShelf 2024-08-18 16:50:51 +03:00
parent 14f2d11c75
commit 3d9b446c98
No known key found for this signature in database
GPG key ID: AF26552424E53993

View file

@ -1,8 +1,16 @@
{
{lib, ...}: let
inherit (lib.modules) mkForce;
in {
services.openssh = {
enable = true;
# since this is a VM, use a separate port than the host's
ports = [2222];
settings = {
PasswordAuthentication = mkForce false;
KexAlgorithms = mkForce ["sntrup761x25519-sha512@openssh.com"];
KbdInteractiveAuthentication = mkForce false;
};
};
}