This commit is contained in:
Lukas Wurzinger 2024-09-15 18:04:44 +02:00
parent dabf4c0ebb
commit b7a77f8cf1

View file

@ -1,8 +1,4 @@
{
lib,
pkgs,
...
}: {
age.identityPaths = ["/etc/ssh/ssh_host_ed25519_key"];
services.openssh = {
@ -15,19 +11,8 @@
}
];
settings = {
PermitRootLogin = "forced-commands-only";
PermitRootLogin = "without-password";
PasswordAuthentication = false;
};
};
programs.ssh = {
startAgent = true;
enableAskPassword = true;
askPassword = lib.getExe' pkgs.ksshaskpass "ksshaskpass";
};
environment.etc."ssh/ssh_config".text = lib.mkAfter ''
Compression yes
ServerAliveInterval 60
'';
}