prescientmoon/satellite
1
Fork 0
Code Activity

Allow guacamole to ssh into lapetus

Browse source
This commit is contained in:
prescientmoon 2024-06-13 15:50:52 +02:00
parent e924b339c8
commit a9fd6e10f3
Signed by: prescientmoon
SSH key fingerprint: SHA256:UUF9JT2s8Xfyv76b8ZuVL7XrmimH4o49p4b+iexbVH4
2 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
hosts/nixos/common/global/services/openssh.nix
View file

@ -16,11 +16,8 @@ in
enable = true; enable = true;
settings = { settings = {
# Forbid root login through SSH. PermitRootLogin = "no"; # Forbid root login through SSH.
PermitRootLogin = "no"; PasswordAuthentication = false; # Use keys only.
# Use keys only. Remove if you want to SSH using password (not recommended)
PasswordAuthentication = false;
}; };
# Automatically remove stale sockets # Automatically remove stale sockets
@ -38,8 +35,8 @@ in
]; ];
}; };
# Passwordless sudo when SSH'ing with keys
# TODO: is this safe? Can we ssh back and gain root access this way? # TODO: is this safe? Can we ssh back and gain root access this way?
# Passwordless sudo when SSH'ing with keys
# security.pam.enableSSHAgentAuth = true; # security.pam.enableSSHAgentAuth = true;
# SSH on slow connections # SSH on slow connections

3
hosts/nixos/lapetus/services/guacamole/default.nix
View file

@ -11,4 +11,7 @@
services.guacamole-client = { services.guacamole-client = {
enable = true; enable = true;
}; };
# Allow ssh-ing using the provided key
users.users.pilot.openssh.authorizedKeys.keyFiles = [ ./ed25519.pub ];
} }