summaryrefslogtreecommitdiff
path: root/modules/xnet/net/sshd.nix
diff options
context:
space:
mode:
authorKleidi Bujari <mail@4kb.net>2026-06-14 19:25:42 -0700
committerKleidi Bujari <mail@4kb.net>2026-06-14 19:25:42 -0700
commit51b9c57d6c23ba3b1678acd3458fbcbc3051a932 (patch)
tree13f85727bcd17171366cb7d9248a1964559abba8 /modules/xnet/net/sshd.nix
parent11fea3d709bf912ef562ef3ac32804bf0ba22f80 (diff)
downloaddepot-51b9c57d6c23ba3b1678acd3458fbcbc3051a932.tar.gz
depot-51b9c57d6c23ba3b1678acd3458fbcbc3051a932.tar.bz2
depot-51b9c57d6c23ba3b1678acd3458fbcbc3051a932.zip
delete unmaintained net module
Diffstat (limited to 'modules/xnet/net/sshd.nix')
-rw-r--r--modules/xnet/net/sshd.nix46
1 files changed, 0 insertions, 46 deletions
diff --git a/modules/xnet/net/sshd.nix b/modules/xnet/net/sshd.nix
deleted file mode 100644
index 9d7976e..0000000
--- a/modules/xnet/net/sshd.nix
+++ /dev/null
@@ -1,46 +0,0 @@
-{ config, lib, ... }:
-let
- cfg = config.xnet.net.sshd;
- inherit (lib) mkOption mkIf types;
-in
-{
- options.xnet.net.sshd = {
- enable = mkOption {
- type = types.bool;
- default = false;
- description = "Enable hardened SSH service.";
- };
- };
-
- config = mkIf cfg.enable {
- services.openssh = {
- enable = true;
- startWhenNeeded = true;
- openFirewall = true;
- hostKeys = [{
- path = "/persist/certs/ssh/ssh_host_ed25519_key";
- type = "ed25519";
- }];
- settings = {
- UsePAM = false;
- X11Forwarding = false;
- PermitRootLogin = "prohibit-password";
- PasswordAuthentication = false;
- Ciphers = [ "chacha20-poly1305@openssh.com" ];
- Macs = [ "hmac-sha2-512-etm@openssh.com" ];
- KexAlgorithms = [ "curve25519-sha256@libssh.org" ];
- };
- sftpServerExecutable = "internal-sftp";
- sftpFlags = [ "-f AUTHPRIV" "-l INFO" ];
- extraConfig =
- let
- pubkeyTypes = lib.strings.concatStringsSep "," [
- "sk-ssh-ed25519-cert-v01@openssh.com"
- "ssh-ed25519-cert-v01@openssh.com"
- "ssh-ed25519"
- ];
- in
- "PubkeyAcceptedKeyTypes ${pubkeyTypes}";
- };
- };
-}