nixos/sshd: add authorizedKeysCommand and authorizedKeysCommandUser options

This commit is contained in:
Aaron Andersen
2020-03-12 21:00:12 -04:00
parent 6d14bac048
commit dbe59eca84
4 changed files with 35 additions and 8 deletions
+2 -4
View File
@@ -59,10 +59,8 @@ in
exec ${package}/bin/google_authorized_keys "$@"
'';
};
services.openssh.extraConfig = ''
AuthorizedKeysCommand /etc/ssh/authorized_keys_command_google_oslogin %u
AuthorizedKeysCommandUser nobody
'';
services.openssh.authorizedKeysCommand = "/etc/ssh/authorized_keys_command_google_oslogin %u";
services.openssh.authorizedKeysCommandUser = "nobody";
};
}