adapt ssh config

2024-04-01 19:46:54 +02:00
parent 8907b6418f
commit 018b3e8f73
1 changed files with 7 additions and 1 deletions
--- a/modules/services/ssh.nix
+++ b/modules/services/ssh.nix
@@ -2,9 +2,15 @@
    networking.firewall.allowedTCPPorts = [ 22 ];
    services.openssh = {
        enable = true;
+        allowSFTP = false;
        settings.PasswordAuthentication = false;
        settings.KbdInteractiveAuthentication = false;
+        settings.X11Forwarding = false;
        settings.PermitRootLogin = "no";
-        settings.X11Forwarding = true;
+        extraConfig = ''
+            AllowAgentForwarding no
+            AllowStreamLocalForwarding no
+            AuthenticationMethods publickey
+        '';
    };
 }