openssh: kill open and stale connections quicker
This commit is contained in:
parent
00000174a6
commit
00000017b2
|
@ -189,6 +189,7 @@
|
||||||
# Required for deployment and sops
|
# Required for deployment and sops
|
||||||
enable = true;
|
enable = true;
|
||||||
settings = {
|
settings = {
|
||||||
|
LoginGraceTime = 30; # throw out unauthenticated connections earlier than the 120 default
|
||||||
PasswordAuthentication = lib.mkIf (!config.c3d2.k-ot.enable) false;
|
PasswordAuthentication = lib.mkIf (!config.c3d2.k-ot.enable) false;
|
||||||
PermitRootLogin = lib.mkOverride 900 "prohibit-password";
|
PermitRootLogin = lib.mkOverride 900 "prohibit-password";
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in New Issue