c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

Remove permit root login without password everywhere

This commit is contained in:
Sandro - 2021-10-03 00:17:38 +02:00
parent f58e8b6474
commit 9018db9086
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
11 changed files with 1 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/containers/deployer/configuration.nix
View File

@ -56,7 +56,6 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes";
}; };
nix = { nix = {

1
hosts/containers/dn42/default.nix
View File

@ -40,7 +40,6 @@ in {
# SSH for nixops # SSH for nixops
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.permitRootLogin = "yes";
boot.kernel.sysctl = { boot.kernel.sysctl = {
"net.ipv4.conf.all.forwarding" = true; "net.ipv4.conf.all.forwarding" = true;

1
hosts/containers/elastic/configuration.nix
View File

@ -29,7 +29,6 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes";
}; };
services.elasticsearch = { services.elasticsearch = {

1
hosts/containers/gitea/modules/ssh.nix
View File

@ -3,7 +3,6 @@
{ {
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "prohibit-password";
extraConfig = '' extraConfig = ''
Match User gitea Match User gitea
AllowAgentForwarding no AllowAgentForwarding no

1
hosts/containers/logging/configuration.nix
View File

@ -37,7 +37,6 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes";
}; };
services.nginx = { services.nginx = {

1
hosts/containers/lxc-template.nix
View File

@ -17,7 +17,6 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes";
}; };
# This value determines the NixOS release with which your system is to be # This value determines the NixOS release with which your system is to be

1
hosts/containers/mongo/configuration.nix
View File

@ -29,7 +29,6 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes";
}; };
services.mongodb = { services.mongodb = {

1
hosts/dacbert/default.nix
View File

@ -100,7 +100,6 @@
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes";
}; };
security.sudo = { security.sudo = {
enable = true; enable = true;

1
hosts/pulsebert/default.nix
View File

@ -70,7 +70,6 @@ in
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes";
}; };
security.sudo = { security.sudo = {
enable = true; enable = true;

1
hosts/radiobert/default.nix
View File

@ -118,7 +118,6 @@
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes";
}; };
security.sudo = { security.sudo = {
enable = true; enable = true;

2
lib/default.nix
View File

@ -236,7 +236,7 @@ in {
# Required for deployment # Required for deployment
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes"; permitRootLogin = "prohibit-password";
}; };
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [