Allow only system-level authorized_keys
This commit is contained in:
parent
0f053083da
commit
bce101e23f
1 changed files with 5 additions and 0 deletions
|
|
@ -1,3 +1,7 @@
|
|||
{ lib
|
||||
, ...
|
||||
}:
|
||||
|
||||
{
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
|
|
@ -16,5 +20,6 @@
|
|||
UseDns = false;
|
||||
X11Forwarding = false;
|
||||
};
|
||||
authorizedKeysFiles = lib.mkForce [ "/etc/ssh/authorized_keys.d/%u" ];
|
||||
};
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue