voronind/nix
0
0
Fork 0
Code Issues 40 Pull requests Packages Projects Releases Wiki Activity

Sshd : Add work key.

Browse source
This commit is contained in:
Dmitry Voronin 2024-03-09 20:13:06 +03:00
parent 69e9681187
commit b367895072
1 changed files with 6 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
module/common/Sshd.nix
View file

@ -2,6 +2,7 @@
users.users.root.openssh.authorizedKeys.keys = [ users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGIf192IxsksM6u8UY+eqpHopebgV+NNq2G03ssdXIgz root@desktop" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGIf192IxsksM6u8UY+eqpHopebgV+NNq2G03ssdXIgz root@desktop"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJSWdbkYsRiDlKu8iT/k+JN4KY08iX9qh4VyqxlpEZcE root@home" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJSWdbkYsRiDlKu8iT/k+JN4KY08iX9qh4VyqxlpEZcE root@home"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFgiYKFkMfiGOZCZIk+O7LtaoF6A3cHEFCqaPwXOM4rR root@work"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIL2LI1iFDZC223aWqBVz9yusfB/XrRwsBKiL5warIF/ nix-on-droid@phone" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIL2LI1iFDZC223aWqBVz9yusfB/XrRwsBKiL5warIF/ nix-on-droid@phone"
]; ];
services.openssh = { services.openssh = {
@ -14,12 +15,12 @@
port = 22143; port = 22143;
} }
]; ];
settings = { # TODO: Migrate from passwords. settings = {
AllowUsers = [ "root" ]; AllowUsers = [ "root" ];
LoginGraceTime = "1m"; LoginGraceTime = "1m";
MaxAuthTries = 4; MaxAuthTries = 1;
MaxSessions = 10; MaxSessions = 10;
PermitRootLogin = "yes"; # TODO: Make `prohibit-password`. PermitRootLogin = "prohibit-password";
StrictModes = false; StrictModes = false;
UseDns = false; UseDns = false;
@ -27,9 +28,9 @@
GSSAPIAuthentication = false; GSSAPIAuthentication = false;
HostbasedAuthentication = false; HostbasedAuthentication = false;
KbdInteractiveAuthentication = true; KbdInteractiveAuthentication = false;
KerberosAuthentication = false; KerberosAuthentication = false;
PasswordAuthentication = true; PasswordAuthentication = false;
PermitEmptyPasswords = false; PermitEmptyPasswords = false;
PubkeyAuthentication = true; PubkeyAuthentication = true;
}; };