SSH: fix for terraform, comment for experiment

This commit is contained in:
kat witch 2021-11-11 19:49:22 +00:00
parent 792bab8aa6
commit f7d156b88c
No known key found for this signature in database
GPG key ID: 1B477797DCA5EC72

View file

@ -20,6 +20,12 @@ with lib;
};
};
/*
security.pam.services.sshd.text = mkDefault (mkAfter ''
session required pam_exec.so ${katnotify}/bin/notify
'');
*/
services.openssh = {
enable = true;
ports = lib.mkDefault [ 62954 ];
@ -28,6 +34,7 @@ with lib;
permitRootLogin = lib.mkDefault "prohibit-password";
kexAlgorithms = [ "curve25519-sha256@libssh.org" ];
extraConfig = ''
PubkeyAcceptedAlgorithms +ssh-rsa
StreamLocalBindUnlink yes
LogLevel VERBOSE
'';