chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Disallow password auth for data user

Browse source
This commit is contained in:
Charlotte Van Petegem 2022-06-04 01:47:26 +02:00
parent 1de2b2813d
commit 535f3db618
No known key found for this signature in database
GPG key ID: 019E764B7184435A
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/services/data-access/config.nix
View file

@ -34,6 +34,8 @@
AllowTcpForwarding no AllowTcpForwarding no
AllowAgentForwarding no AllowAgentForwarding no
ForceCommand internal-sftp ForceCommand internal-sftp
Match user data
PasswordAuthentication no
''; '';
authorizedKeysFiles = [ "/run/secrets/%u_authorized_keys" ]; authorizedKeysFiles = [ "/run/secrets/%u_authorized_keys" ];
}; };