mirror of
https://github.com/gensokyo-zone/infrastructure.git
synced 2026-02-09 12:29:19 -08:00
SSH: fix for terraform, comment for experiment
This commit is contained in:
parent
792bab8aa6
commit
f7d156b88c
1 changed files with 7 additions and 0 deletions
|
|
@ -20,6 +20,12 @@ with lib;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
/*
|
||||||
|
security.pam.services.sshd.text = mkDefault (mkAfter ''
|
||||||
|
session required pam_exec.so ${katnotify}/bin/notify
|
||||||
|
'');
|
||||||
|
*/
|
||||||
|
|
||||||
services.openssh = {
|
services.openssh = {
|
||||||
enable = true;
|
enable = true;
|
||||||
ports = lib.mkDefault [ 62954 ];
|
ports = lib.mkDefault [ 62954 ];
|
||||||
|
|
@ -28,6 +34,7 @@ with lib;
|
||||||
permitRootLogin = lib.mkDefault "prohibit-password";
|
permitRootLogin = lib.mkDefault "prohibit-password";
|
||||||
kexAlgorithms = [ "curve25519-sha256@libssh.org" ];
|
kexAlgorithms = [ "curve25519-sha256@libssh.org" ];
|
||||||
extraConfig = ''
|
extraConfig = ''
|
||||||
|
PubkeyAcceptedAlgorithms +ssh-rsa
|
||||||
StreamLocalBindUnlink yes
|
StreamLocalBindUnlink yes
|
||||||
LogLevel VERBOSE
|
LogLevel VERBOSE
|
||||||
'';
|
'';
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue