notgne2/nixfiles
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

improve default openssh config

Browse Source
This commit is contained in:
notgne2 2022-02-08 02:36:30 -07:00
parent 3507f1f0f1
commit 6e22cf546e
Signed by: notgne2
GPG Key ID: 5CE0A245A2DAC84A
1 changed files with 12 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
common.nix
View File

@ -56,12 +56,6 @@
'';
};
# allow reverse ssh port shit to be public sometimes
services.openssh.gatewayPorts = lib.mkDefault "clientspecified";
# no homo
nixpkgs.config.oraclejdk.accept_license = lib.mkDefault true;
# set some basic system props
security.sudo.wheelNeedsPassword = lib.mkDefault false;
networking.networkmanager.enable = lib.mkDefault true;
@ -92,9 +86,18 @@
git
];
services.openssh = {
# Allow ssh
services.openssh.enable = lib.mkDefault true;
services.openssh.passwordAuthentication = lib.mkDefault false;
enable = lib.mkDefault true;
# lol no
permitRootLogin = lib.mkDefault "no";
passwordAuthentication = lib.mkDefault false;
# allow reverse ssh port shit to be public sometimes
gatewayPorts = lib.mkDefault "clientspecified";
extraConfig = ''
StreamLocalBindUnlink yes
'';
};
# Use a firewall
networking.firewall.enable = lib.mkDefault true;