aviallon/nixos-lib
1
0
Fork 0
mirror of https://github.com/aviallon/nixos-lib.git synced 2026-04-06 01:38:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[Hardening] Deactivate password login for root when hardening is enabled

Browse source
This commit is contained in:
Antoine Viallon 2022-03-02 20:56:16 +01:00
parent 4915bff563
commit 3d55cc1894
Signed by: aviallon
GPG key ID: 186FC35EDEB25716
2 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
services.nix
View file

@ -47,7 +47,7 @@ in {
# Enable the OpenSSH daemon.
services.openssh.enable = true;
# services.openssh.permitRootLogin = "prohibit-password";
services.openssh.permitRootLogin = "yes";
services.openssh.permitRootLogin = mkDefault "yes";
networking.firewall.allowedTCPPorts = [ 22 ];
networking.firewall.allowedUDPPorts = [ 22 ];
@ -113,6 +113,7 @@ in {
] (x: builtins.toJSON x));
# Enusre low-latency response for this time-critical service
systemd.services."hdapsd@" = {
serviceConfig = {
Nice = -20;