diff options
| author | Kleidi Bujari <mail@4kb.net> | 2026-10-24 22:52:35 -0700 |
|---|---|---|
| committer | Kleidi Bujari <mail@4kb.net> | 2026-10-24 22:59:09 -0700 |
| commit | 48c8a4145c5a73874797a6de3f05ce584b1d1798 (patch) | |
| tree | bd4c627e8c8944fb7082b7a9982e8d3677c2a2c4 /modules/sshd.nix | |
| parent | 1a181be93f37a94b347b2f5f97a1fef57e11cf89 (diff) | |
| parent | 27db59cac4f3c3e7a1e4187a5f56d4ec61895c5a (diff) | |
| download | depot-48c8a4145c5a73874797a6de3f05ce584b1d1798.tar.gz depot-48c8a4145c5a73874797a6de3f05ce584b1d1798.tar.bz2 depot-48c8a4145c5a73874797a6de3f05ce584b1d1798.zip | |
Diffstat (limited to 'modules/sshd.nix')
| -rw-r--r-- | modules/sshd.nix | 20 |
1 files changed, 10 insertions, 10 deletions
diff --git a/modules/sshd.nix b/modules/sshd.nix index 6afec3f..421ab7f 100644 --- a/modules/sshd.nix +++ b/modules/sshd.nix @@ -33,7 +33,7 @@ in startWhenNeeded = true; openFirewall = true; hostKeys = lib.singleton { - path = "/persist/certs/ssh/ssh_host_ed25519_key"; + path = "/var/lib/sshd/ssh_host_ed25519_key"; type = "ed25519"; }; settings = { @@ -41,6 +41,7 @@ in X11Forwarding = false; PermitRootLogin = "prohibit-password"; PasswordAuthentication = mkDefault false; + KbdInteractiveAuthentication = false; # Ciphers = [ "chacha20-poly1305@openssh.com" ]; # Macs = [ "hmac-sha2-512-etm@openssh.com" ]; # KexAlgorithms = [ "curve25519-sha256@libssh.org" ]; @@ -50,15 +51,14 @@ in "-f AUTHPRIV" "-l INFO" ]; - # extraConfig = - # let - # pubkeyTypes = lib.strings.concatStringsSep "," [ - # "sk-ssh-ed25519-cert-v01@openssh.com" - # "ssh-ed25519-cert-v01@openssh.com" - # "ssh-ed25519" - # ]; - # in - # "PubkeyAcceptedKeyTypes ${pubkeyTypes}"; + extraConfig = + let + pubkeyTypes = lib.strings.concatStringsSep "," [ + "sk-ssh-ed25519@openssh.com" + "ssh-ed25519" + ]; + in + "PubkeyAcceptedKeyTypes ${pubkeyTypes}"; }; users.users.root.openssh.authorizedKeys.keys = [ |