diff options
| author | Franz Pletz <fpletz@fnordicwalking.de> | 2017-09-18 21:43:16 +0200 |
|---|---|---|
| committer | Franz Pletz <fpletz@fnordicwalking.de> | 2017-09-18 21:52:07 +0200 |
| commit | dc08dcf6e7d8f93de6d0987a0e0afa40266e7f07 (patch) | |
| tree | a365e84d4dcfa385c81940b51ccbe34e1720cd10 /nixos/modules/services/networking/ssh | |
| parent | a796d692c4883bb01dcb8fdb78c8f25253a2ba42 (diff) | |
| download | nixlib-dc08dcf6e7d8f93de6d0987a0e0afa40266e7f07.tar nixlib-dc08dcf6e7d8f93de6d0987a0e0afa40266e7f07.tar.gz nixlib-dc08dcf6e7d8f93de6d0987a0e0afa40266e7f07.tar.bz2 nixlib-dc08dcf6e7d8f93de6d0987a0e0afa40266e7f07.tar.lz nixlib-dc08dcf6e7d8f93de6d0987a0e0afa40266e7f07.tar.xz nixlib-dc08dcf6e7d8f93de6d0987a0e0afa40266e7f07.tar.zst nixlib-dc08dcf6e7d8f93de6d0987a0e0afa40266e7f07.zip | |
ssh service: add sftpFlags option
Diffstat (limited to 'nixos/modules/services/networking/ssh')
| -rw-r--r-- | nixos/modules/services/networking/ssh/sshd.nix | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/nixos/modules/services/networking/ssh/sshd.nix b/nixos/modules/services/networking/ssh/sshd.nix index 0f58536b4b73..8828429a8178 100644 --- a/nixos/modules/services/networking/ssh/sshd.nix +++ b/nixos/modules/services/networking/ssh/sshd.nix @@ -103,6 +103,15 @@ in ''; }; + sftpFlags = mkOption { + type = with types; listOf str; + default = []; + example = [ "-f AUTHPRIV" "-l INFO" ]; + description = '' + Commandline flags to add to sftp-server. + ''; + }; + permitRootLogin = mkOption { default = "prohibit-password"; type = types.enum ["yes" "without-password" "prohibit-password" "forced-commands-only" "no"]; @@ -208,7 +217,7 @@ in }; moduliFile = mkOption { - example = "services.openssh.moduliFile = /etc/my-local-ssh-moduli;"; + example = "/etc/my-local-ssh-moduli;"; type = types.path; description = '' Path to <literal>moduli</literal> file to install in @@ -338,7 +347,7 @@ in ''} ${optionalString cfg.allowSFTP '' - Subsystem sftp ${cfgc.package}/libexec/sftp-server + Subsystem sftp ${cfgc.package}/libexec/sftp-server ${concatStringsSep " " cfg.sftpFlags} ''} PermitRootLogin ${cfg.permitRootLogin} |