c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

Remove permit root login without password everywhere

This commit is contained in:
Sandro - 2021-10-03 00:17:38 +02:00
parent f58e8b6474
commit 9018db9086
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
11 changed files with 1 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/containers/deployer/configuration.nix
View File

@ -56,7 +56,6 @@
services.openssh = {
enable = true;
permitRootLogin = "yes";
};
nix = {

1
hosts/containers/dn42/default.nix
View File

@ -40,7 +40,6 @@ in {
# SSH for nixops
services.openssh.enable = true;
services.openssh.permitRootLogin = "yes";
boot.kernel.sysctl = {
"net.ipv4.conf.all.forwarding" = true;

1
hosts/containers/elastic/configuration.nix
View File

@ -29,7 +29,6 @@
services.openssh = {
enable = true;
permitRootLogin = "yes";
};
services.elasticsearch = {

1
hosts/containers/gitea/modules/ssh.nix
View File

@ -3,7 +3,6 @@
{
services.openssh = {
enable = true;
permitRootLogin = "prohibit-password";
extraConfig = ''
Match User gitea
AllowAgentForwarding no

1
hosts/containers/logging/configuration.nix
View File

@ -37,7 +37,6 @@
services.openssh = {
enable = true;
permitRootLogin = "yes";
};
services.nginx = {

1
hosts/containers/lxc-template.nix
View File

@ -17,7 +17,6 @@
services.openssh = {
enable = true;
permitRootLogin = "yes";
};
# This value determines the NixOS release with which your system is to be

1
hosts/containers/mongo/configuration.nix
View File

@ -29,7 +29,6 @@
services.openssh = {
enable = true;
permitRootLogin = "yes";
};
services.mongodb = {

1
hosts/dacbert/default.nix
View File

@ -100,7 +100,6 @@
# Enable the OpenSSH daemon.
services.openssh = {
enable = true;
permitRootLogin = "yes";
};
security.sudo = {
enable = true;

1
hosts/pulsebert/default.nix
View File

@ -70,7 +70,6 @@ in
# Enable the OpenSSH daemon.
services.openssh = {
enable = true;
permitRootLogin = "yes";
};
security.sudo = {
enable = true;

1
hosts/radiobert/default.nix
View File

@ -118,7 +118,6 @@
# Enable the OpenSSH daemon.
services.openssh = {
enable = true;
permitRootLogin = "yes";
};
security.sudo = {
enable = true;

2
lib/default.nix
View File

@ -236,7 +236,7 @@ in {
# Required for deployment
services.openssh = {
enable = true;
permitRootLogin = "yes";
permitRootLogin = "prohibit-password";
};
environment.systemPackages = with pkgs; [