Christoph Heiss
dfeffdf041
All checks were successful
flake / build (push) Successful in 3m9s
Apparently, the default value is `true`, not `false` as I erroneously
assumed. :/
Fixes: 389f345 ("services: openssh: disable sftp subsystem")
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
15 lines
297 B
Nix
15 lines
297 B
Nix
{
|
|
services.openssh = {
|
|
enable = true;
|
|
allowSFTP = false;
|
|
settings = {
|
|
KbdInteractiveAuthentication = false;
|
|
PasswordAuthentication = false;
|
|
PermitEmptyPasswords = false;
|
|
PermitRootLogin = "no";
|
|
UseDns = false;
|
|
X11Forwarding = false;
|
|
};
|
|
};
|
|
}
|