adapt ssh config

This commit is contained in:
Kopatz
2024-04-01 19:46:54 +02:00
parent 8907b6418f
commit 018b3e8f73

View File

@@ -2,9 +2,15 @@
networking.firewall.allowedTCPPorts = [ 22 ]; networking.firewall.allowedTCPPorts = [ 22 ];
services.openssh = { services.openssh = {
enable = true; enable = true;
allowSFTP = false;
settings.PasswordAuthentication = false; settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false; settings.KbdInteractiveAuthentication = false;
settings.X11Forwarding = false;
settings.PermitRootLogin = "no"; settings.PermitRootLogin = "no";
settings.X11Forwarding = true; extraConfig = ''
AllowAgentForwarding no
AllowStreamLocalForwarding no
AuthenticationMethods publickey
'';
}; };
} }