diff options
| author | Fuwn <[email protected]> | 2024-09-23 04:22:55 -0700 |
|---|---|---|
| committer | Fuwn <[email protected]> | 2024-09-23 04:26:18 -0700 |
| commit | 25c0dc8a00f2a74009b036421455da00cb91d1f2 (patch) | |
| tree | 2449436c51444840ddd2446e6be115c7cdb444e8 /modules/desktop/software | |
| parent | modules: move shared modules to core (diff) | |
| download | nixos-config-25c0dc8a00f2a74009b036421455da00cb91d1f2.tar.xz nixos-config-25c0dc8a00f2a74009b036421455da00cb91d1f2.zip | |
modules: move shared access modules to core
Diffstat (limited to 'modules/desktop/software')
| -rw-r--r-- | modules/desktop/software/access/ssh.nix | 36 |
1 files changed, 4 insertions, 32 deletions
diff --git a/modules/desktop/software/access/ssh.nix b/modules/desktop/software/access/ssh.nix index 665532f..b514049 100644 --- a/modules/desktop/software/access/ssh.nix +++ b/modules/desktop/software/access/ssh.nix @@ -3,37 +3,9 @@ programs.ssh.startAgent = false; security.pam.sshAgentAuth.enable = true; - services = { - fail2ban.jails.sshd.settings = { - enabled = true; - filter = "sshd[mode=aggressive]"; - port = lib.strings.concatStringsSep "," (map toString config.services.openssh.ports); - }; - - openssh = { - enable = true; - ports = [ 22 ]; - openFirewall = false; - - settings = { - StreamLocalBindUnlink = "yes"; - GatewayPorts = "clientspecified"; - - KexAlgorithms = [ - "curve25519-sha256" - "diffie-hellman-group16-sha512" - "diffie-hellman-group18-sha512" - "diffie-hellman-group-exchange-sha256" - ]; - - Macs = [ - ]; - }; - }; + services.fail2ban.jails.sshd.settings = { + enabled = true; + filter = "sshd[mode=aggressive]"; + port = lib.strings.concatStringsSep "," (map toString config.services.openssh.ports); }; } |