flakes/modules/nixos
Chinmay D. Pai 12cf2f3701
chore: harden ssh security
* KbdInteractiveAuthentication: disable keyboard interactive-auth, since
  we solely rely on the SSH key for connection.
* PermitEmptyPasswords: disable empty passwords for SSH connection, again,
  since we use SSH keys.
* Protocol: Explicitly set the SSH protocol to 2, even though it is the
  default value.
* MaxAuthTries: Set auth tries to 3. This is to allow up to 3 keys to try
  connection.
* ChallengeResponseAuthentication: We do not require a challenge-response
  setup.
* AllowTcpForwarding: Allows access to locally-running ports without having
  to expose them. Since all auth methods are disabled, we can enable this.

Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2024-10-05 20:53:47 +05:30
..
core chore: harden ssh security 2024-10-05 20:53:47 +05:30
desktop chore: exclude additional kde packages 2024-09-29 23:05:30 +05:30
gaming/steam feat: add nixos configuration based on snowfall-lib 2024-09-02 18:31:19 +05:30
hardware feat: add nixos configuration based on snowfall-lib 2024-09-02 18:31:19 +05:30
monitoring feat: add monitoring module for infrastructure 2024-09-02 19:16:01 +05:30
networking chore: remove unused iproute2 from netbird 2024-09-02 20:48:47 +05:30
services feat: create module for nginx and prepare for fail2ban setup 2024-10-05 20:52:11 +05:30
user feat: add nixos configuration based on snowfall-lib 2024-09-02 18:31:19 +05:30