nixos/sshd: add authorizedKeysCommand and authorizedKeysCommandUser options

This commit is contained in:
Aaron Andersen
2020-03-12 21:00:12 -04:00
parent 6d14bac048
commit dbe59eca84
4 changed files with 35 additions and 8 deletions
+2 -4
View File
@@ -88,9 +88,7 @@ in {
exec ${pkgs.sssd}/bin/sss_ssh_authorizedkeys "$@"
'';
};
services.openssh.extraConfig = ''
AuthorizedKeysCommand /etc/ssh/authorized_keys_command
AuthorizedKeysCommandUser nobody
'';
services.openssh.authorizedKeysCommand = "/etc/ssh/authorized_keys_command";
services.openssh.authorizedKeysCommandUser = "nobody";
})];
}