v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Projects Releases Packages Activity Actions

Harden OpenSSH

Browse source
This commit is contained in:
Vivian 2021-11-23 17:44:00 +01:00
parent e638c9aa5a
commit d5e2e248e3
3 changed files with 21 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nixos/common/default.nix
View file

@ -45,12 +45,15 @@
'';
# Enable SSH daemon support.
services.openssh.enable = true;
services.openssh = {
enable = true;
passwordAuthentication = false;
permitRootLogin = "no";
};
vault-secrets = {
vaultPrefix = "nixos";
vaultAddress = "http://vault.olympus:8200/";
approlePrefix = "olympus-${config.networking.hostName}";
};
}