From 8b5e5079e5fd00eadf2e3926c104e4ecf99a5779 Mon Sep 17 00:00:00 2001 From: Fuwn Date: Wed, 4 Sep 2024 19:57:20 -0700 Subject: refac --- modules/system/access/ssh.nix | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 modules/system/access/ssh.nix (limited to 'modules/system/access/ssh.nix') diff --git a/modules/system/access/ssh.nix b/modules/system/access/ssh.nix new file mode 100644 index 0000000..b1fc187 --- /dev/null +++ b/modules/system/access/ssh.nix @@ -0,0 +1,26 @@ +{ + programs.ssh.startAgent = false; + + services.openssh = { + enable = true; + ports = [ 22 ]; + openFirewall = false; + + settings = { + KexAlgorithms = [ + "curve25519-sha256" + "curve25519-sha256@libssh.org" + "diffie-hellman-group16-sha512" + "diffie-hellman-group18-sha512" + "diffie-hellman-group-exchange-sha256" + "sntrup761x25519-sha512@openssh.com" + ]; + + Macs = [ + "hmac-sha2-512-etm@openssh.com" + "hmac-sha2-256-etm@openssh.com" + "umac-128-etm@openssh.com" + ]; + }; + }; +} -- cgit v1.2.3