mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: adapt to ssh option renames

Browse source 
Change-Id: I6fc2aaefe40e449bd1937bb68f3a2ab4abaa5cd0
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8372
Reviewed-by: tazjin <tazjin@tvl.su>
Autosubmit: sterni <sternenseemann@systemli.org>
Reviewed-by: grfn <grfn@gws.fyi>
Tested-by: BuildkiteCI
This commit is contained in:
sterni 2023-03-30 18:22:17 +02:00 committed by clbot
parent cf32ab1c9c
commit faa45f076d
3 changed files with 9 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ops/machines/whitby/default.nix
View file

@ -213,8 +213,10 @@ in
programs.mosh.enable = true;
services.openssh = {
enable = true;
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
};
};
# Configure secrets for services that need them.

6
users/grfn/system/system/machines/mugwump.nix
View file

@ -102,8 +102,10 @@ with lib;
services.openssh = {
allowSFTP = false;
passwordAuthentication = false;
permitRootLogin = "no";
settings = {
PasswordAuthentication = false;
PermitRootLogin = "no";
};
};
services.grafana = {

2
users/grfn/system/system/machines/roswell.nix
View file

@ -19,7 +19,7 @@
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.loader.efi.canTouchEfiVariables = lib.mkForce false;
services.openssh.passwordAuthentication = false;
services.openssh.settings.PasswordAuthentication = false;
services.tailscale.enable = true;