derped/nixos
1
0
Fork 0
Code Releases Activity

Added mailserver submodule; OpenSSH now logs sftp access.

Browse source
This commit is contained in:
Kevin Baensch 2019-02-26 14:10:58 +01:00
parent 9003080a64
commit 764f126524
3 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
services/openssh.nix
View file

@ -1,8 +1,12 @@
{ config, lib, pkgs, ... }:
# For reference:
# https://infosec.mozilla.org/guidelines/openssh.html
# https://stribika.github.io/2015/01/04/secure-secure-shell.html
{
services.openssh = {
enable = true;
sftpFlags = [ "-f AUTHPRIV" "-l INFO" ];
startWhenNeeded = true;
challengeResponseAuthentication = false;
passwordAuthentication = false;