diff options
Diffstat (limited to 'modules/ssh/default.nix')
| -rw-r--r-- | modules/ssh/default.nix | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/modules/ssh/default.nix b/modules/ssh/default.nix index 713810da7346..b3c29dd3666c 100644 --- a/modules/ssh/default.nix +++ b/modules/ssh/default.nix @@ -1,13 +1,28 @@ { config, pkgs, lib, ... }: let + inherit (lib) concatStringsSep; + mkDefault = lib.mkOverride ((lib.mkDefault null).priority - 1); + + # SSL added and removed here ;-) + bannedAlgorithms = [ + "ecdsa-sha2-nistp256-cert-v01@openssh.com" + "ecdsa-sha2-nistp384-cert-v01@openssh.com" + "ecdsa-sha2-nistp521-cert-v01@openssh.com" + "ecdsa-sha2-nistp256" + "ecdsa-sha2-nistp384" + "ecdsa-sha2-nistp521" + ]; in { programs.mosh.enable = mkDefault config.services.openssh.enable; programs.ssh.extraConfig = '' + CASignatureAlgorithms -${concatStringsSep "," bannedAlgorithms} + HostKeyAlgorithms -${concatStringsSep "," bannedAlgorithms} + Host uhura spock HostName %h.edef.eu |