9 lines
276 B
Nix
9 lines
276 B
Nix
{ lib, ...}:
|
|
{
|
|
services.openssh.enable = true;
|
|
services.openssh.settings.X11Forwarding = true;
|
|
services.openssh.settings.PasswordAuthentication = false;
|
|
services.openssh.settings.KbdInteractiveAuthentication = false;
|
|
services.fail2ban.enable = lib.mkDefault true;
|
|
}
|