Infinidoge/universe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

global/security: enable ssh GatewayPorts

Browse source
This commit is contained in:
Infinidoge 2024-04-14 07:27:35 -04:00
parent d9d184041e
commit d55fccdd3a
Signed by: Infinidoge
SSH key fingerprint: SHA256:oAMyvotlNFraMmZmr+p6AxnNfW/GioTs1pOn3V4tQ7A
1 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/global/security.nix
View file

@ -38,7 +38,10 @@ with lib;
services.openssh = { services.openssh = {
enable = true; enable = true;
openFirewall = mkDefault true; openFirewall = mkDefault true;
settings.X11Forwarding = mkDefault false; settings = {
X11Forwarding = mkDefault false;
GatewayPorts = mkDefault "yes";
};
hostKeys = mkDefault [{ hostKeys = mkDefault [{
path = "/etc/ssh/ssh_host_ed25519_key"; path = "/etc/ssh/ssh_host_ed25519_key";
type = "ed25519"; type = "ed25519";