@cryptotaxi247 / infra-1 / commits / 63703a6e

delft: stop accepting ssh-dss key pairs

Martin Weinelt committed Feb 24, 2024 at 13:02 UTC 63703a6e186cde20f28f3f31497e59cd0655db0f
1 file changed -5
delft/common.nix
-5
@@ -14,11 +14,6 @@ with lib;
14
15 services.openssh.authorizedKeysFiles = mkForce [ "/etc/ssh/authorized_keys.d/%u" ];
16
17 - services.openssh.extraConfig =
18 - ''
19 - PubkeyAcceptedKeyTypes +ssh-dss
20 - '';
21 -
17 boot.kernelModules = [ "coretemp" ];
18
19 # Prevent "out of sync" errors on the KVM switch.