tec/golgi
tec
/
golgi
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Harden SSH

This commit is contained in:
TEC 2022-08-14 15:38:36 +08:00
parent 9bd44a4bba
commit 5511b8b30a
Signed by: tec
SSH Key Fingerprint: SHA256:eobz41Mnm0/iYWBvWThftS0ElEs1ftBr6jamutnXc/A
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
modules/common.nix
View File

@ -2,7 +2,12 @@
{
time.timeZone = "UTC";
services.openssh = { enable = true; };
services.openssh = {
enable = true;
# require public key authentication for better security
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
};
system.stateVersion = "22.05";
nix = {