feat(modules/dgn-ssh): Disable kbdinteractiveauthentication
Some checks are pending
build configuration / build_web02 (push) Successful in 57s
build configuration / build_storage01 (push) Successful in 1m0s
build configuration / build_vault01 (push) Successful in 1m2s
build configuration / build_web01 (push) Successful in 1m19s
build configuration / build_compute01 (push) Successful in 1m21s
ds-fr update / npins_update (push) Successful in 1m50s
npins update / npins_update (push) Has started running

This commit is contained in:
Tom Hubrecht 2024-01-30 10:22:27 +01:00
parent 073a816fd6
commit ef460753a8

View file

@ -35,23 +35,26 @@
{ config, lib, ... }: { config, lib, ... }:
let let
inherit (lib) inherit (lib) mkEnableOption mkIf;
mkEnableOption
mkIf;
cfg = config.dgn-ssh; cfg = config.dgn-ssh;
in in
{ {
options.dgn-ssh = { options.dgn-ssh = {
enable = mkEnableOption "ssh default configuration." // { default = true; }; enable = mkEnableOption "ssh default configuration." // {
default = true;
};
}; };
config = mkIf cfg.enable { config = mkIf cfg.enable {
services.openssh = { services.openssh = {
enable = true; enable = true;
settings.PasswordAuthentication = false; settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
};
}; };
programs.mosh.enable = true; programs.mosh.enable = true;