clerie/nixfiles
1
0
Fork 0
Code

configuration/common: use ed25519 host keys for ssh only from now

Browse Source
This commit is contained in:
clerie 2023-09-22 17:06:14 +02:00
parent c46a031b39
commit 8c81af4f7f
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
configuration/common/default.nix
View File

@ -61,6 +61,10 @@
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
PermitRootLogin = lib.mkDefault "no"; PermitRootLogin = lib.mkDefault "no";
}; };
services.openssh.hostKeys = lib.mkForce [
# Only create ed25519 host keys
{ type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; }
];
nix.gc = lib.mkDefault { nix.gc = lib.mkDefault {
automatic = true; automatic = true;