From 2edbeda7e4517da1abf48f9a70a5ce300d20608c Mon Sep 17 00:00:00 2001
From: Fuwn <contact@fuwn.me>
Date: Wed, 11 Sep 2024 18:15:29 -0700
Subject: Bump

---
 modules/software/access/ssh.nix | 4 ++++
 modules/software/systemd.nix    | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/modules/software/access/ssh.nix b/modules/software/access/ssh.nix
index 8a2b30d..665532f 100644
--- a/modules/software/access/ssh.nix
+++ b/modules/software/access/ssh.nix
@@ -1,6 +1,7 @@
 { lib, config, ... }:
 {
   programs.ssh.startAgent = false;
+  security.pam.sshAgentAuth.enable = true;
 
   services = {
     fail2ban.jails.sshd.settings = {
@@ -15,6 +16,9 @@
       openFirewall = false;
 
       settings = {
+        StreamLocalBindUnlink = "yes";
+        GatewayPorts = "clientspecified";
+
         KexAlgorithms = [
           "curve25519-sha256"
           "curve25519-sha256@libssh.org"
diff --git a/modules/software/systemd.nix b/modules/software/systemd.nix
index 9ecb5b2..c475d96 100644
--- a/modules/software/systemd.nix
+++ b/modules/software/systemd.nix
@@ -1,6 +1,6 @@
 { pkgs, ... }:
 {
-  # boot.initrd.systemd.enable = true;
+  boot.initrd.systemd.enable = true;
 
   systemd.services.containerd.path = with pkgs; [
     containerd
-- 
cgit v1.2.3