tasiaiso/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

sshd with yubikeys

Browse source
This commit is contained in:
Tasia Iso 2024-10-05 10:39:16 +02:00
parent 4db5ead22b
commit 05de7968de
Signed by: tasiaiso
SSH key fingerprint: SHA256:KiRjUay5C9i6objsEOIycygBHn54pDBB3Lj7fyJ0Elw
2 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
common/services/sshd.nix
View file

@ -41,6 +41,9 @@
X11Forwarding no X11Forwarding no
AllowAgentForwarding no AllowAgentForwarding no
AllowStreamLocalForwarding no AllowStreamLocalForwarding no
# Yubikey
PubkeyAuthOptions verify-required
''; '';
}; };

4
crypto/ssh-keys.nix
View file

@ -6,8 +6,8 @@ rec {
tasia = { tasia = {
yaseen = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILLyDLtqUhEQwIsPx0XgQ9OJb2+XxL+2ra4goNJEgwf0 tasia@yaseen"; yaseen = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILLyDLtqUhEQwIsPx0XgQ9OJb2+XxL+2ra4goNJEgwf0 tasia@yaseen";
yubi-primary = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAILIk1pSwnKGtUQUGfTjVexY7oE1qKUyzkU5JzHKcqZ1fAAAABHNzaDo= tasia@yaseen"; yubi-primary = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIDZTEBwdL/Ey7++/Cq15+nSyeKmBHMuRu44fDJ7L2T51AAAABHNzaDo= Primary Key";
yubi-spare = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIC2mI87noofcUqlR7EILgqKSxj8OrWIM6ctwqtEsJC4uAAAABHNzaDo= tasia@yaseen"; yubi-spare = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIGjHm14dQiyZz70knJjwCZ6yrgkl72LE2w2jCsBNlrlHAAAABHNzaDo= Spare Key";
}; };
host = { host = {