Allow only system-level authorized_keys

This commit is contained in:
Jakob Lechner 2024-05-28 20:22:26 +02:00
parent 0f053083da
commit bce101e23f

View file

@ -1,3 +1,7 @@
{ lib
, ...
}:
{
services.openssh = {
enable = true;
@ -16,5 +20,6 @@
UseDns = false;
X11Forwarding = false;
};
authorizedKeysFiles = lib.mkForce [ "/etc/ssh/authorized_keys.d/%u" ];
};
}