mirror/github.com-tboerger-nixos-config
1
0
Fork 0
mirror of https://github.com/tboerger/nixos-config synced 2024-11-23 03:32:08 +01:00
Code Issues

fix: replace deprecated options for openssh

Browse Source
This commit is contained in:
Thomas Boerger 2023-02-15 09:11:13 +01:00
parent 96c5d9f4af
commit bd2744df18
No known key found for this signature in database
GPG Key ID: 09745AFF9D63C79B
1 changed files with 22 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
shared/services/openssh/default.nix
View File

@ -23,28 +23,31 @@ in
openssh = { openssh = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
permitRootLogin = "yes";
ciphers = [ settings = {
"chacha20-poly1305@openssh.com" PermitRootLogin = "yes";
"aes256-gcm@openssh.com"
"aes256-ctr"
"aes128-gcm@openssh.com"
];
macs = [ Ciphers = [
"umac-128-etm@openssh.com" "chacha20-poly1305@openssh.com"
"hmac-sha2-256-etm@openssh.com" "aes256-gcm@openssh.com"
"hmac-sha2-512-etm@openssh.com" "aes256-ctr"
"hmac-sha2-512" "aes128-gcm@openssh.com"
]; ];
kexAlgorithms = [ Macs = [
"curve25519-sha256@libssh.org" "umac-128-etm@openssh.com"
"diffie-hellman-group16-sha512" "hmac-sha2-256-etm@openssh.com"
"diffie-hellman-group18-sha512" "hmac-sha2-512-etm@openssh.com"
"curve25519-sha256" "hmac-sha2-512"
]; ];
KexAlgorithms = [
"curve25519-sha256@libssh.org"
"diffie-hellman-group16-sha512"
"diffie-hellman-group18-sha512"
"curve25519-sha256"
];
};
}; };
}; };
}; };