commit 741704a19fe119a48086ad248aeb1f1f0b708278
parent 7220a04d754177942f34386a585b869de38643ab
Author: Katja (ctucx) <git@ctu.cx>
Date: Wed, 21 May 2025 13:01:21 +0200
parent 7220a04d754177942f34386a585b869de38643ab
Author: Katja (ctucx) <git@ctu.cx>
Date: Wed, 21 May 2025 13:01:21 +0200
config/nixos/modules/services/openssh: disable `X11Forwarding`
1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/config/nixos/modules/services/openssh.nix b/config/nixos/modules/services/openssh.nix @@ -63,6 +63,9 @@ in # Disable keyboardinteractive authentication KbdInteractiveAuthentication = false; + X11Forwarding = false; + + # Only allow users of the ssh and sftp groups to connect AllowGroups = [ "sftp"