This repository has no description
module: allow configuring sshd match block
this could be done by the user directly by setting the match block by
themselves, but this should avoid any ambiguities of doing so since
the handling of multiple match blocks with the same ident might be
unexpected for some.
author
Cassie Cheung
date
(Mar 13, 2025, 1:44 PM +0800)
commit
efc0a6dd
efc0a6ddc658fe02975f25342ec65f364414108a
parent
95d90fdf
95d90fdfe0af17a5d6c86598439ea463cc1da646
+12
+12
module.nix
+12
module.nix
···
113
113
description = "Additional environment variables. Use `environmentFile` for secrets.";
114
114
};
115
115
116
+
extraSshdConfig = mkOption {
117
+
type = types.lines;
118
+
default = "";
119
+
example = ''
120
+
Banner none
121
+
PasswordAuthentication no
122
+
KbdInteractiveAuthentication no
123
+
'';
124
+
description = "Additional sshd_config options to set for the git user.";
125
+
};
126
+
116
127
environmentFile = mkOption {
117
128
type = types.nullOr types.path;
118
129
default = null;
···
149
160
Match User ${cfg.gitUser}
150
161
AuthorizedKeysCommand ${lib.getExe' wrapped-packages "keyfetch"}
151
162
AuthorizedKeysCommandUser nobody
163
+
${cfg.extraSshdConfig}
152
164
'';
153
165
};
154
166