LorenzProbst/infra-one
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add simple fail2ban, remove passwordauth for ssh

Browse source
This commit is contained in:
LorenzProbst 2026-06-17 14:04:04 +02:00
parent 9cae73f501
commit fe558dead0
1 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

16
configuration.nix
View file

@ -110,7 +110,15 @@
programs = { programs = {
mosh.enable = true; mosh.enable = true;
ssh.startAgent = true; ssh = {
startAgent = true;
extraConfig = "
Host git.lo-probst.de
Hostname git.lo-probst.de
Port 23
User forgejo
";
};
}; };
# Some programs need SUID wrappers, can be configured further or are # Some programs need SUID wrappers, can be configured further or are
# started in user sessions. # started in user sessions.
@ -128,11 +136,15 @@
enable = true; enable = true;
ports = [ 22 ]; ports = [ 22 ];
settings = { settings = {
PasswordAuthentication = true; PasswordAuthentication = false;
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
PermitRootLogin = "yes"; PermitRootLogin = "yes";
}; };
}; };
fail2ban = {
enable = true;
bantime = "12h";
};
}; };
# services.nginx = { # services.nginx = {