notgne2/nixfiles
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

improve default openssh config

Browse Source
This commit is contained in:
notgne2 2022-02-08 02:36:30 -07:00
parent 3507f1f0f1
commit 6e22cf546e
Signed by: notgne2
GPG Key ID: 5CE0A245A2DAC84A
1 changed files with 12 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
common.nix
View File

@ -56,12 +56,6 @@
''; '';
}; };
# allow reverse ssh port shit to be public sometimes
services.openssh.gatewayPorts = lib.mkDefault "clientspecified";
# no homo
nixpkgs.config.oraclejdk.accept_license = lib.mkDefault true;
# set some basic system props # set some basic system props
security.sudo.wheelNeedsPassword = lib.mkDefault false; security.sudo.wheelNeedsPassword = lib.mkDefault false;
networking.networkmanager.enable = lib.mkDefault true; networking.networkmanager.enable = lib.mkDefault true;
@ -92,9 +86,18 @@
git git
]; ];
# Allow ssh services.openssh = {
services.openssh.enable = lib.mkDefault true; # Allow ssh
services.openssh.passwordAuthentication = lib.mkDefault false; enable = lib.mkDefault true;
# lol no
permitRootLogin = lib.mkDefault "no";
passwordAuthentication = lib.mkDefault false;
# allow reverse ssh port shit to be public sometimes
gatewayPorts = lib.mkDefault "clientspecified";
extraConfig = ''
StreamLocalBindUnlink yes
'';
};
# Use a firewall # Use a firewall
networking.firewall.enable = lib.mkDefault true; networking.firewall.enable = lib.mkDefault true;