diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/software/access/ssh.nix | 4 | ||||
| -rw-r--r-- | modules/software/systemd.nix | 2 |
2 files changed, 5 insertions, 1 deletions
diff --git a/modules/software/access/ssh.nix b/modules/software/access/ssh.nix index 8a2b30d..665532f 100644 --- a/modules/software/access/ssh.nix +++ b/modules/software/access/ssh.nix @@ -1,6 +1,7 @@ { lib, config, ... }: { programs.ssh.startAgent = false; + security.pam.sshAgentAuth.enable = true; services = { fail2ban.jails.sshd.settings = { @@ -15,6 +16,9 @@ openFirewall = false; settings = { + StreamLocalBindUnlink = "yes"; + GatewayPorts = "clientspecified"; + KexAlgorithms = [ "curve25519-sha256" diff --git a/modules/software/systemd.nix b/modules/software/systemd.nix index 9ecb5b2..c475d96 100644 --- a/modules/software/systemd.nix +++ b/modules/software/systemd.nix @@ -1,6 +1,6 @@ { pkgs, ... }: { - # boot.initrd.systemd.enable = true; + boot.initrd.systemd.enable = true; systemd.services.containerd.path = with pkgs; [ containerd |