Infinidoge/universe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

global/security: enable ssh GatewayPorts

Browse source
This commit is contained in:
Infinidoge 2024-04-14 07:27:35 -04:00
parent d9d184041e
commit d55fccdd3a
Signed by: Infinidoge
SSH key fingerprint: SHA256:oAMyvotlNFraMmZmr+p6AxnNfW/GioTs1pOn3V4tQ7A
1 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

9
modules/global/security.nix
View file

@ -38,10 +38,13 @@ with lib;
services.openssh = {
enable = true;
openFirewall = mkDefault true;
settings.X11Forwarding = mkDefault false;
settings = {
X11Forwarding = mkDefault false;
GatewayPorts = mkDefault "yes";
};
hostKeys = mkDefault [{
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519";
}];
};