blob: b51404948f4a0b96e5d64a3d3939450bb7d7bb19 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
|
{ lib, config, ... }:
{
programs.ssh.startAgent = false;
security.pam.sshAgentAuth.enable = true;
services.fail2ban.jails.sshd.settings = {
enabled = true;
filter = "sshd[mode=aggressive]";
port = lib.strings.concatStringsSep "," (map toString config.services.openssh.ports);
};
}
|