reNixos/kyra/services/openssh.nix
s0me1newithhand7s 2dedd6fbc5 kyra(hardening): openssh ???
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:06:55 +03:00

26 lines
572 B
Nix

_: {
services = {
openssh = {
enable = true;
hostKeys = [
{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}
];
settings = {
PrintMotd = false;
PermitRootLogin = "no";
PasswordAuthentication = false;
MaxAuthTries = 3;
LoginGraceTime = 10;
PermitEmptyPasswords = "no";
ChallengeResponseAuthentication = "no";
KerberosAuthentication = "no";
GSSAPIAuthentication = "no";
X11Forwarding = false;
};
};
};
}