forked from DGNum/infrastructure
feat(modules/dgn-ssh): Disable kbdinteractiveauthentication
This commit is contained in:
parent
073a816fd6
commit
ef460753a8
1 changed files with 8 additions and 5 deletions
|
@ -35,23 +35,26 @@
|
||||||
{ config, lib, ... }:
|
{ config, lib, ... }:
|
||||||
|
|
||||||
let
|
let
|
||||||
inherit (lib)
|
inherit (lib) mkEnableOption mkIf;
|
||||||
mkEnableOption
|
|
||||||
mkIf;
|
|
||||||
|
|
||||||
cfg = config.dgn-ssh;
|
cfg = config.dgn-ssh;
|
||||||
in
|
in
|
||||||
|
|
||||||
{
|
{
|
||||||
options.dgn-ssh = {
|
options.dgn-ssh = {
|
||||||
enable = mkEnableOption "ssh default configuration." // { default = true; };
|
enable = mkEnableOption "ssh default configuration." // {
|
||||||
|
default = true;
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
services.openssh = {
|
services.openssh = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
||||||
settings.PasswordAuthentication = false;
|
settings = {
|
||||||
|
PasswordAuthentication = false;
|
||||||
|
KbdInteractiveAuthentication = false;
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
programs.mosh.enable = true;
|
programs.mosh.enable = true;
|
||||||
|
|
Loading…
Reference in a new issue