hektor/nix
1
0
Fork 0
Code Pull Requests Actions Activity

fix(ssh): enforce SSH public key authentication only in depth

Browse Source
This commit is contained in:
Hektor Misplon
2026-07-12 13:43:17 +02:00
parent beb894e97c
commit da72da34a1
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/ssh/hardened-openssh.nix
+1
View File
@@ -20,6 +20,7 @@ in
services.openssh.settings = optionalAttrs cfg.harden { services.openssh.settings = optionalAttrs cfg.harden {
PermitRootLogin = "no"; PermitRootLogin = "no";
PasswordAuthentication = false; PasswordAuthentication = false;
AuthenticationMethods = "publickey";
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
ChallengeResponseAuthentication = false; ChallengeResponseAuthentication = false;
X11Forwarding = false; X11Forwarding = false;