Extend SSH config

2022-08-15 14:55:47 +02:00 · 2022-08-15 14:55:47 +02:00 · 3b65060551
parent e7ceaaa3fc
commit 3b65060551
1 changed files with 12 additions and 6 deletions
--- a/modules/common/default.nix
+++ b/modules/common/default.nix
@ -25,12 +25,18 @@
  };

  programs.mosh.enable = true;
-  services = {
-    openssh = {
-      enable = true;
-      permitRootLogin = "no";
-      passwordAuthentication = false;
-    };
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "no";
+    passwordAuthentication = false;
+    kbdInteractiveAuthentication = false;
+    extraConfig = ''
+      AllowTcpForwarding yes
+      X11Forwarding no
+      AllowAgentForwarding no
+      AllowStreamLocalForwarding no
+      AuthenticationMethods publickey
+    '';
  };

  # Select internationalisation properties.