about summary refs log tree commit diff
path: root/nixos/modules/security
diff options
context:
space:
mode:
authorAaron Andersen <aaron@fosslib.net>2020-03-12 10:58:50 -0400
committerAaron Andersen <aaron@fosslib.net>2020-03-12 21:00:12 -0400
commitdbe59eca8402523b82d406a63eccb62d82d964ae (patch)
treecd5f429fc4231d01d05cbedf5c6b0111bc6aca66 /nixos/modules/security
parent6d14bac04845951be7d7231cd33edd8d47545635 (diff)
downloadnixlib-dbe59eca8402523b82d406a63eccb62d82d964ae.tar
nixlib-dbe59eca8402523b82d406a63eccb62d82d964ae.tar.gz
nixlib-dbe59eca8402523b82d406a63eccb62d82d964ae.tar.bz2
nixlib-dbe59eca8402523b82d406a63eccb62d82d964ae.tar.lz
nixlib-dbe59eca8402523b82d406a63eccb62d82d964ae.tar.xz
nixlib-dbe59eca8402523b82d406a63eccb62d82d964ae.tar.zst
nixlib-dbe59eca8402523b82d406a63eccb62d82d964ae.zip
nixos/sshd: add authorizedKeysCommand and authorizedKeysCommandUser options
Diffstat (limited to 'nixos/modules/security')
-rw-r--r--nixos/modules/security/google_oslogin.nix6
1 files changed, 2 insertions, 4 deletions
diff --git a/nixos/modules/security/google_oslogin.nix b/nixos/modules/security/google_oslogin.nix
index 246419b681af..6f9962e1d626 100644
--- a/nixos/modules/security/google_oslogin.nix
+++ b/nixos/modules/security/google_oslogin.nix
@@ -59,10 +59,8 @@ in
         exec ${package}/bin/google_authorized_keys "$@"
       '';
     };
-    services.openssh.extraConfig = ''
-      AuthorizedKeysCommand /etc/ssh/authorized_keys_command_google_oslogin %u
-      AuthorizedKeysCommandUser nobody
-    '';
+    services.openssh.authorizedKeysCommand = "/etc/ssh/authorized_keys_command_google_oslogin %u";
+    services.openssh.authorizedKeysCommandUser = "nobody";
   };
 
 }