summaryrefslogtreecommitdiff
path: root/modules/desktop/software
diff options
context:
space:
mode:
authorFuwn <[email protected]>2024-09-23 04:22:55 -0700
committerFuwn <[email protected]>2024-09-23 04:26:18 -0700
commit25c0dc8a00f2a74009b036421455da00cb91d1f2 (patch)
tree2449436c51444840ddd2446e6be115c7cdb444e8 /modules/desktop/software
parentmodules: move shared modules to core (diff)
downloadnixos-config-25c0dc8a00f2a74009b036421455da00cb91d1f2.tar.xz
nixos-config-25c0dc8a00f2a74009b036421455da00cb91d1f2.zip
modules: move shared access modules to core
Diffstat (limited to 'modules/desktop/software')
-rw-r--r--modules/desktop/software/access/ssh.nix36
1 files changed, 4 insertions, 32 deletions
diff --git a/modules/desktop/software/access/ssh.nix b/modules/desktop/software/access/ssh.nix
index 665532f..b514049 100644
--- a/modules/desktop/software/access/ssh.nix
+++ b/modules/desktop/software/access/ssh.nix
@@ -3,37 +3,9 @@
programs.ssh.startAgent = false;
security.pam.sshAgentAuth.enable = true;
- services = {
- fail2ban.jails.sshd.settings = {
- enabled = true;
- filter = "sshd[mode=aggressive]";
- port = lib.strings.concatStringsSep "," (map toString config.services.openssh.ports);
- };
-
- openssh = {
- enable = true;
- ports = [ 22 ];
- openFirewall = false;
-
- settings = {
- StreamLocalBindUnlink = "yes";
- GatewayPorts = "clientspecified";
-
- KexAlgorithms = [
- "curve25519-sha256"
- "diffie-hellman-group16-sha512"
- "diffie-hellman-group18-sha512"
- "diffie-hellman-group-exchange-sha256"
- ];
-
- Macs = [
- ];
- };
- };
+ services.fail2ban.jails.sshd.settings = {
+ enabled = true;
+ filter = "sshd[mode=aggressive]";
+ port = lib.strings.concatStringsSep "," (map toString config.services.openssh.ports);
};
}