julien.rbrt.fr / tangled-core
forked from tangled.org/core
Monorepo for Tangled — https://tangled.org
fork atom

nix/modules/knot: block openssh password authentication

Signed-off-by: Seongmin Lee <git@boltless.me>

boltless.me 7dea751c ec98937d

options
unified split
Changed files
+2
nix
modules
knot.nix
+2
nix/modules/knot.nix 
···

       
195

       
 

       
          Match User ${cfg.gitUser}


     

       
196

       
 

       
              AuthorizedKeysCommand /etc/ssh/keyfetch_wrapper


     

       
197

       
 

       
              AuthorizedKeysCommandUser nobody


     

       

       

       
     

       

       

       
     

       
198

       
 

       
        '';


     

       
199

       
 

       
      };


     

       
200

       
 

       



     
···

       
195

       
 

       
          Match User ${cfg.gitUser}


     

       
196

       
 

       
              AuthorizedKeysCommand /etc/ssh/keyfetch_wrapper


     

       
197

       
 

       
              AuthorizedKeysCommandUser nobody


     

       
198

       
+

       
              ChallengeResponseAuthentication no


     

       
199

       
+

       
              PasswordAuthentication no


     

       
200

       
 

       
        '';


     

       
201

       
 

       
      };


     

       
202