summaryrefslogtreecommitdiff
path: root/system-profiles/openssh/default.nix
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2023-02-27 15:09:35 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2023-02-27 15:09:35 +0100
commitd438f5312d5c705b16181ffba3531d7304c09ddb (patch)
tree9826ce7ab670b649f7d3b7d61bdfac856d02bd5f /system-profiles/openssh/default.nix
parent37292c1c8d2a7b3038fdad635372bbccd833e698 (diff)
downloadnixos-d438f5312d5c705b16181ffba3531d7304c09ddb.tar
nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.tar.gz
nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.tar.bz2
nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.tar.xz
nixos-d438f5312d5c705b16181ffba3531d7304c09ddb.zip
...
Diffstat (limited to 'system-profiles/openssh/default.nix')
-rw-r--r--system-profiles/openssh/default.nix4
1 files changed, 2 insertions, 2 deletions
diff --git a/system-profiles/openssh/default.nix b/system-profiles/openssh/default.nix
index 929a5bdd..a047a21d 100644
--- a/system-profiles/openssh/default.nix
+++ b/system-profiles/openssh/default.nix
@@ -22,8 +22,8 @@ in {
22 Macs = [ "hmac-sha2-256-etm@openssh.com" "hmac-sha2-256" "hmac-sha2-512-etm@openssh.com" "hmac-sha2-512" ]; 22 Macs = [ "hmac-sha2-256-etm@openssh.com" "hmac-sha2-256" "hmac-sha2-512-etm@openssh.com" "hmac-sha2-512" ];
23 KexAlgorithms = [ "curve25519-sha256@libssh.org" "diffie-hellman-group-exchange-sha256" ]; 23 KexAlgorithms = [ "curve25519-sha256@libssh.org" "diffie-hellman-group-exchange-sha256" ];
24 LogLevel = "VERBOSE"; 24 LogLevel = "VERBOSE";
25 HostKeyAlgorithms = [ "sk-ssh-ed25519-cert-v01@openssh.com" "ssh-ed25519-cert-v01@openssh.com" "rsa-sha2-256-cert-v01@openssh.com" "rsa-sha2-512-cert-v01@openssh.com" "sk-ssh-ed25519@openssh.com" "ssh-ed25519" "rsa-sha2-256" "rsa-sha2-512" ]; 25 HostKeyAlgorithms = "sk-ssh-ed25519-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-256,rsa-sha2-512";
26 CASignatureAlgorithms = [ "sk-ssh-ed25519@openssh.com" "ssh-ed25519" "rsa-sha2-256" "rsa-sha2-512" ]; 26 CASignatureAlgorithms = "sk-ssh-ed25519@openssh.com,ssh-ed25519,rsa-sha2-256,rsa-sha2-512";
27 RevokedKeys = "/etc/ssh/krl.bin"; 27 RevokedKeys = "/etc/ssh/krl.bin";
28 }; 28 };
29 moduliFile = mkIf (config.sops.secrets ? "ssh_moduli") config.sops.secrets.ssh_moduli.path; 29 moduliFile = mkIf (config.sops.secrets ? "ssh_moduli") config.sops.secrets.ssh_moduli.path;