Files
conf/modules/nixos/networking/hard-ssh.nix
andromeda c9a5c521db stash
2026-01-06 14:52:34 +01:00

20 lines
379 B
Nix

{
services.openssh = {
enable = true;
allowSFTP = false;
ports = [5522];
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
KbdInteractiveAuthentication = true;
};
extraConfig = ''
AllowTcpForwarding no
AllowAgentForwarding no
MaxAuthTries 3
MaxSessions 4
TCPKeepAlive no
'';
};
}