ssh: ajout lien best practices

ajout clef mbp pour root (car radx n'est toujours pas en route)
2016-09-15 15:52:15 +02:00 · 2016-09-15 12:08:25 +02:00
2 changed files with 2 additions and 0 deletions
--- a/base/activation-manuelle/users.nix
+++ b/base/activation-manuelle/users.nix
@@ -20,6 +20,7 @@ in {

  users.extraUsers.root = {
    openssh.authorizedKeys.keys = [
+      mbpJPierre03
      radxJPierre03
      radxRoot
      phenomTaeradan
--- a/public/service-ssh.nix
+++ b/public/service-ssh.nix
@@ -14,6 +14,7 @@ mkIf true {
  services.openssh = {
    enable = true;
    # https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29
+    # http://www.cyberciti.biz/tips/linux-unix-bsd-openssh-server-best-practices.html
    extraConfig = ''
      KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
      Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
Author	SHA1	Message	Date
Jean-Pierre PRUNARET	9b4a4f1b67	ssh: ajout lien best practices	2016-09-15 15:52:15 +02:00
Jean-Pierre PRUNARET	b622554b42	ajout clef mbp pour root (car radx n'est toujours pas en route)	2016-09-15 12:08:25 +02:00