nix-dotfiles/modules/security.nix
2023-12-29 15:21:18 +01:00

21 lines
419 B
Nix

{ config, lib, ... }:
{
config = {
services = lib.mkIf config.services.gitea.enable {
openssh = {
extraConfig = ''
Match User gitea
AllowAgentForwarding no
AllowTcpForwarding no
PermitTTY no
X11Forwarding no
'';
};
gitea.settings."ssh.minimum_key_sizes" = {
ECDSA = -1;
RSA = 4095;
};
};
};
}