diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2023-02-27 15:09:35 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2023-02-27 15:09:35 +0100 |
| commit | d438f5312d5c705b16181ffba3531d7304c09ddb (patch) | |
| tree | 9826ce7ab670b649f7d3b7d61bdfac856d02bd5f /system-profiles/openssh/default.nix | |
| parent | 37292c1c8d2a7b3038fdad635372bbccd833e698 (diff) | |
| download | nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.tar nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.tar.gz nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.tar.bz2 nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.tar.xz nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.zip | |
...
Diffstat (limited to 'system-profiles/openssh/default.nix')
| -rw-r--r-- | system-profiles/openssh/default.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/system-profiles/openssh/default.nix b/system-profiles/openssh/default.nix index 929a5bdd..a047a21d 100644 --- a/system-profiles/openssh/default.nix +++ b/system-profiles/openssh/default.nix | |||
| @@ -22,8 +22,8 @@ in { | |||
| 22 | Macs = [ "hmac-sha2-256-etm@openssh.com" "hmac-sha2-256" "hmac-sha2-512-etm@openssh.com" "hmac-sha2-512" ]; | 22 | Macs = [ "hmac-sha2-256-etm@openssh.com" "hmac-sha2-256" "hmac-sha2-512-etm@openssh.com" "hmac-sha2-512" ]; |
| 23 | KexAlgorithms = [ "curve25519-sha256@libssh.org" "diffie-hellman-group-exchange-sha256" ]; | 23 | KexAlgorithms = [ "curve25519-sha256@libssh.org" "diffie-hellman-group-exchange-sha256" ]; |
| 24 | LogLevel = "VERBOSE"; | 24 | LogLevel = "VERBOSE"; |
| 25 | HostKeyAlgorithms = [ "sk-ssh-ed25519-cert-v01@openssh.com" "ssh-ed25519-cert-v01@openssh.com" "rsa-sha2-256-cert-v01@openssh.com" "rsa-sha2-512-cert-v01@openssh.com" "sk-ssh-ed25519@openssh.com" "ssh-ed25519" "rsa-sha2-256" "rsa-sha2-512" ]; | 25 | HostKeyAlgorithms = "sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-256,rsa-sha2-512"; |
| 26 | CASignatureAlgorithms = [ "sk-ssh-ed25519@openssh.com" "ssh-ed25519" "rsa-sha2-256" "rsa-sha2-512" ]; | 26 | CASignatureAlgorithms = "sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-256,rsa-sha2-512"; |
| 27 | RevokedKeys = "/etc/ssh/krl.bin"; | 27 | RevokedKeys = "/etc/ssh/krl.bin"; |
| 28 | }; | 28 | }; |
| 29 | moduliFile = mkIf (config.sops.secrets ? "ssh_moduli") config.sops.secrets.ssh_moduli.path; | 29 | moduliFile = mkIf (config.sops.secrets ? "ssh_moduli") config.sops.secrets.ssh_moduli.path; |