blob: d633fbbefa3c6960bf7efec62316e0362ab29bd8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
{services, networking, ...}:
{
services.openssh = {
enable = true;
ports = [ 22 ];
settings = {
PasswordAuthentication = true;
AllowUsers = null; # Allows all users by default. Can be [ "user1" "user2" ]
UseDns = true;
X11Forwarding = false;
GatewayPorts = "yes";
PermitRootLogin = "no"; # "yes", "without-password", "prohibit-password", "forced-commands-only", "no"
};
};
# networking.firewall.allowedTCPPorts = [22];
}
|