ahuston-0/nix-dotfiles
1
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases Wiki Activity

removing unnecessary code (#41)

Browse Source 
* removing unnecessary code

* replaced some of the code

* removed endlessh-go from jeeves-jr
This commit is contained in:
Richie Cahill 2024-01-16 18:49:03 -05:00 committed by GitHub
parent 5d2f5934f8
commit 2305974694
3 changed files with 2 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
modules/security.nix
View File

@ -3,11 +3,10 @@
{ {
config = { config = {
services = { services = {
openssh = lib.mkIf config.services.gitea.enable { openssh = lib.mkIf config.services.gitea.enable {
extraConfig = '' extraConfig = ''
Match User gitea Match User gitea
AllowAgentForwarding no
AllowTcpForwarding no
PermitTTY no PermitTTY no
X11Forwarding no X11Forwarding no
''; '';

1
systems/configuration.nix
View File

@ -68,6 +68,7 @@
PermitEmptyPasswords = "no"; PermitEmptyPasswords = "no";
PermitRootLogin = "no"; PermitRootLogin = "no";
TcpKeepAlive = "no"; TcpKeepAlive = "no";
X11Forwarding = lib.mkDefault false;
KexAlgorithms = [ KexAlgorithms = [
"curve25519-sha256@libssh.org" "curve25519-sha256@libssh.org"

5
systems/jeeves-jr/configuration.nix
View File

@ -64,11 +64,6 @@
services = { services = {
nfs.server.enable = true; nfs.server.enable = true;
endlessh-go = {
enable = true;
port = 22;
};
openssh.ports = [ 352 ]; openssh.ports = [ 352 ];
smartd.enable = true; smartd.enable = true;