From 00000017b2d829a25ae33ac11665e08fff04b680 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Thu, 22 Jun 2023 22:23:10 +0200
Subject: [PATCH] openssh: kill open and stale connections quicker

---
 config/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/default.nix b/config/default.nix
index 203ae83d..da173537 100644
--- a/config/default.nix
+++ b/config/default.nix
@@ -189,6 +189,7 @@
       # Required for deployment and sops
       enable = true;
       settings = {
+        LoginGraceTime = 30; # throw out unauthenticated connections earlier than the 120 default
         PasswordAuthentication = lib.mkIf (!config.c3d2.k-ot.enable) false;
         PermitRootLogin = lib.mkOverride 900 "prohibit-password";
       };