nixos/sshd: don't set KDF rounds for host keys (#415385)

Changed files
-3
nixos
modules
services
networking
ssh
-3
nixos/modules/services/networking/ssh/sshd.nix
···
type = "rsa";
bits = 4096;
path = "/etc/ssh/ssh_host_rsa_key";
-
rounds = 100;
openSSHFormat = true;
}
{
type = "ed25519";
path = "/etc/ssh/ssh_host_ed25519_key";
-
rounds = 100;
comment = "key comment";
}
];
···
ssh-keygen \
-t "${k.type}" \
${lib.optionalString (k ? bits) "-b ${toString k.bits}"} \
-
${lib.optionalString (k ? rounds) "-a ${toString k.rounds}"} \
${lib.optionalString (k ? comment) "-C '${k.comment}'"} \
${lib.optionalString (k ? openSSHFormat && k.openSSHFormat) "-o"} \
-f "${k.path}" \