summaryrefslogtreecommitdiff
path: root/modules/software/access/ssh.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/software/access/ssh.nix')
-rw-r--r--modules/software/access/ssh.nix4
1 files changed, 4 insertions, 0 deletions
diff --git a/modules/software/access/ssh.nix b/modules/software/access/ssh.nix
index 8a2b30d..665532f 100644
--- a/modules/software/access/ssh.nix
+++ b/modules/software/access/ssh.nix
@@ -1,6 +1,7 @@
{ lib, config, ... }:
{
programs.ssh.startAgent = false;
+ security.pam.sshAgentAuth.enable = true;
services = {
fail2ban.jails.sshd.settings = {
@@ -15,6 +16,9 @@
openFirewall = false;
settings = {
+ StreamLocalBindUnlink = "yes";
+ GatewayPorts = "clientspecified";
+
KexAlgorithms = [
"curve25519-sha256"