From 889355a1f93bfe94991a9ac86c5e76ee944fc517 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 5 Dec 2017 13:40:36 +0100
Subject: Disallow challenge-response-auth on ymir

---
 ymir.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ymir.nix b/ymir.nix
index ec8566ff..fbe45e03 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -189,6 +189,7 @@ in rec {
   services.openssh = {
     enable = true;
     passwordAuthentication = false;
+    challengeResponseAuthentication = false;
     extraConfig = ''
       AllowGroups ssh
     '';
-- 
cgit v1.2.3