diff options
| author | Fuwn <[email protected]> | 2024-09-11 18:15:29 -0700 |
|---|---|---|
| committer | Fuwn <[email protected]> | 2024-09-11 18:15:29 -0700 |
| commit | 2edbeda7e4517da1abf48f9a70a5ce300d20608c (patch) | |
| tree | a1031ba1d39fb6af9ca51fc14c16bce2e3b9f957 /modules/software/access/ssh.nix | |
| parent | Bump: vscode fork wrappers (diff) | |
| download | nixos-config-2edbeda7e4517da1abf48f9a70a5ce300d20608c.tar.xz nixos-config-2edbeda7e4517da1abf48f9a70a5ce300d20608c.zip | |
Bump
Diffstat (limited to 'modules/software/access/ssh.nix')
| -rw-r--r-- | modules/software/access/ssh.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/modules/software/access/ssh.nix b/modules/software/access/ssh.nix index 8a2b30d..665532f 100644 --- a/modules/software/access/ssh.nix +++ b/modules/software/access/ssh.nix @@ -1,6 +1,7 @@ { lib, config, ... }: { programs.ssh.startAgent = false; + security.pam.sshAgentAuth.enable = true; services = { fail2ban.jails.sshd.settings = { @@ -15,6 +16,9 @@ openFirewall = false; settings = { + StreamLocalBindUnlink = "yes"; + GatewayPorts = "clientspecified"; + KexAlgorithms = [ "curve25519-sha256" |