pull out some extra modules
This commit is contained in:
+9
-8
@@ -3,19 +3,20 @@
|
||||
{
|
||||
networking.firewall = {
|
||||
enable = true;
|
||||
interfaces.wg0.allowedTCPPorts = [ 22 ];
|
||||
interfaces.wg0.allowedTCPPorts = [ 22 ];
|
||||
};
|
||||
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
settings = {
|
||||
settings = {
|
||||
PermitRootLogin = "prohibit-password";
|
||||
PasswordAuthentication = false;
|
||||
KbdInteractiveAuthentication = false;
|
||||
};
|
||||
listenAddresses = [{
|
||||
PasswordAuthentication = false;
|
||||
KbdInteractiveAuthentication = false;
|
||||
};
|
||||
listenAddresses = [{
|
||||
addr = "0.0.0.0";
|
||||
port = 22;
|
||||
}];
|
||||
port = 22;
|
||||
}];
|
||||
};
|
||||
|
||||
users.users.lilac.openssh.authorizedKeys.keys = [
|
||||
|
||||
Reference in New Issue
Block a user