diff options
Diffstat (limited to 'programs/ssh')
-rw-r--r-- | programs/ssh/config | 12 | ||||
-rw-r--r-- | programs/ssh/default.nix | 45 |
2 files changed, 0 insertions, 57 deletions
diff --git a/programs/ssh/config b/programs/ssh/config deleted file mode 100644 index 5ae97b6..0000000 --- a/programs/ssh/config +++ /dev/null @@ -1,12 +0,0 @@ -Match Host * exec "gpg-connect-agent UPDATESTARTUPTTY /bye" - -Host *.in.freya.cat cid.freya.cat alivemc.net - User root - -Host *.cs.rit.edu - User tam2214 - -Host * - HostkeyAlgorithms +ssh-rsa - PubkeyAcceptedKeyTypes +ssh-rsa - KexAlgorithms -sntrup761x25519-sha512@openssh.com diff --git a/programs/ssh/default.nix b/programs/ssh/default.nix deleted file mode 100644 index b6ecb1d..0000000 --- a/programs/ssh/default.nix +++ /dev/null @@ -1,45 +0,0 @@ -{ - config, - lib, - ... -}: { - # ssh config - home-manager.users.${config.user} = { - programs.ssh = { - enable = true; - extraConfig = lib.fileContents ./config; - }; - }; - - # sshd - services.openssh = { - enable = true; - ports = [22]; - settings = { - PasswordAuthentication = false; - KbdInteractiveAuthentication = false; - UseDns = true; - X11Forwarding = false; - PermitRootLogin = "no"; - }; - }; - - # allow ssh port - networking.firewall.allowedTCPPorts = [22]; - - # ban evil - services.fail2ban = { - enable = true; - ignoreIP = [ - # freyanet - "10.0.0.0/14" - ]; - }; - - # add authorized keys - users.users.${config.user} = { - openssh.authorizedKeys.keyFiles = [ - ../../files/keys/ssh.pub - ]; - }; -} |