gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 04:19:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(nixos): ssh Match User blocks

Browse source
This commit is contained in:
arcnmx 2024-02-21 03:15:00 -08:00
parent 4505d8b340
commit 060517bfa0
2 changed files with 72 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
systems/hakurei/reisen-ssh.nix
View file

@ -21,6 +21,11 @@ in {
isNormalUser = true;
autoSubUidGidRange = false;
group = username;
openssh.matchBlock.settings = {
# PasswordAuthentication works too
KbdInteractiveAuthentication = true;
ForceCommand = sshJump;
};
};
users.groups.${username} = {
gid = config.users.users.${username}.uid;
@ -28,11 +33,6 @@ in {
services.openssh = {
ports = mkAfter [ sshPort ];
extraConfig = mkAfter ''
Match User ${username}
KbdInteractiveAuthentication yes
ForceCommand ${sshJump}
'';
};
# required for kbd or password authentication
security.pam.services.sshd.unixAuth = mkForce true;