diff options
| author | Kleidi Bujari <mail@4kb.net> | 2026-06-14 19:25:42 -0700 |
|---|---|---|
| committer | Kleidi Bujari <mail@4kb.net> | 2026-06-14 19:25:42 -0700 |
| commit | 51b9c57d6c23ba3b1678acd3458fbcbc3051a932 (patch) | |
| tree | 13f85727bcd17171366cb7d9248a1964559abba8 /modules/xnet/net/sshd.nix | |
| parent | 11fea3d709bf912ef562ef3ac32804bf0ba22f80 (diff) | |
| download | depot-51b9c57d6c23ba3b1678acd3458fbcbc3051a932.tar.gz depot-51b9c57d6c23ba3b1678acd3458fbcbc3051a932.tar.bz2 depot-51b9c57d6c23ba3b1678acd3458fbcbc3051a932.zip | |
delete unmaintained net module
Diffstat (limited to 'modules/xnet/net/sshd.nix')
| -rw-r--r-- | modules/xnet/net/sshd.nix | 46 |
1 files changed, 0 insertions, 46 deletions
diff --git a/modules/xnet/net/sshd.nix b/modules/xnet/net/sshd.nix deleted file mode 100644 index 9d7976e..0000000 --- a/modules/xnet/net/sshd.nix +++ /dev/null @@ -1,46 +0,0 @@ -{ config, lib, ... }: -let - cfg = config.xnet.net.sshd; - inherit (lib) mkOption mkIf types; -in -{ - options.xnet.net.sshd = { - enable = mkOption { - type = types.bool; - default = false; - description = "Enable hardened SSH service."; - }; - }; - - config = mkIf cfg.enable { - services.openssh = { - enable = true; - startWhenNeeded = true; - openFirewall = true; - hostKeys = [{ - path = "/persist/certs/ssh/ssh_host_ed25519_key"; - type = "ed25519"; - }]; - settings = { - UsePAM = false; - X11Forwarding = false; - PermitRootLogin = "prohibit-password"; - PasswordAuthentication = false; - Ciphers = [ "chacha20-poly1305@openssh.com" ]; - Macs = [ "hmac-sha2-512-etm@openssh.com" ]; - KexAlgorithms = [ "curve25519-sha256@libssh.org" ]; - }; - sftpServerExecutable = "internal-sftp"; - sftpFlags = [ "-f AUTHPRIV" "-l INFO" ]; - extraConfig = - let - pubkeyTypes = lib.strings.concatStringsSep "," [ - "sk-ssh-ed25519-cert-v01@openssh.com" - "ssh-ed25519-cert-v01@openssh.com" - "ssh-ed25519" - ]; - in - "PubkeyAcceptedKeyTypes ${pubkeyTypes}"; - }; - }; -} |
