diff options
| author | Fuwn <[email protected]> | 2024-09-20 05:36:20 -0700 |
|---|---|---|
| committer | Fuwn <[email protected]> | 2024-09-20 05:36:20 -0700 |
| commit | d9747c64b038943253eaafdc59a49d5face46dab (patch) | |
| tree | b452d15a7f20e9f4bb70ec9f9040137bec1072f8 /modules/software/access | |
| parent | himeji: move containers over from seti (diff) | |
| download | nixos-config-d9747c64b038943253eaafdc59a49d5face46dab.tar.xz nixos-config-d9747c64b038943253eaafdc59a49d5face46dab.zip | |
modules: server and core modules
Diffstat (limited to 'modules/software/access')
| -rw-r--r-- | modules/software/access/default.nix | 7 | ||||
| -rw-r--r-- | modules/software/access/gnupg.nix | 18 | ||||
| -rw-r--r-- | modules/software/access/mosh.nix | 6 | ||||
| -rw-r--r-- | modules/software/access/ssh.nix | 39 |
4 files changed, 0 insertions, 70 deletions
diff --git a/modules/software/access/default.nix b/modules/software/access/default.nix deleted file mode 100644 index 7db7629..0000000 --- a/modules/software/access/default.nix +++ /dev/null @@ -1,7 +0,0 @@ -{ - imports = [ - ./gnupg.nix - ./mosh.nix - ./ssh.nix - ]; -} diff --git a/modules/software/access/gnupg.nix b/modules/software/access/gnupg.nix deleted file mode 100644 index e60da30..0000000 --- a/modules/software/access/gnupg.nix +++ /dev/null @@ -1,18 +0,0 @@ -{ pkgs, ... }: -{ - programs.gnupg.agent = { - enable = true; - enableSSHSupport = true; - pinentryPackage = pkgs.pinentry-curses; - enableExtraSocket = true; - enableBrowserSocket = true; - - settings = { - enable-ssh-support = ""; - ttyname = "$GPG_TTY"; - default-cache-ttl = 34560000; # 60 - max-cache-ttl = 34560000; # 120 - allow-loopback-pinentry = ""; - }; - }; -} diff --git a/modules/software/access/mosh.nix b/modules/software/access/mosh.nix deleted file mode 100644 index c9af5bf..0000000 --- a/modules/software/access/mosh.nix +++ /dev/null @@ -1,6 +0,0 @@ -{ - programs.mosh = { - enable = true; - openFirewall = false; - }; -} diff --git a/modules/software/access/ssh.nix b/modules/software/access/ssh.nix deleted file mode 100644 index 665532f..0000000 --- a/modules/software/access/ssh.nix +++ /dev/null @@ -1,39 +0,0 @@ -{ lib, config, ... }: -{ - programs.ssh.startAgent = false; - security.pam.sshAgentAuth.enable = true; - - services = { - fail2ban.jails.sshd.settings = { - enabled = true; - filter = "sshd[mode=aggressive]"; - port = lib.strings.concatStringsSep "," (map toString config.services.openssh.ports); - }; - - openssh = { - enable = true; - ports = [ 22 ]; - openFirewall = false; - - settings = { - StreamLocalBindUnlink = "yes"; - GatewayPorts = "clientspecified"; - - KexAlgorithms = [ - "curve25519-sha256" - "diffie-hellman-group16-sha512" - "diffie-hellman-group18-sha512" - "diffie-hellman-group-exchange-sha256" - ]; - - Macs = [ - ]; - }; - }; - }; -} |