Fix bug

2025-09-13 21:17:45 +02:00 · 2025-09-13 21:17:45 +02:00 · 05bfef728b
commit 05bfef728b
parent 3b3c58b346
1 changed files with 10 additions and 10 deletions
--- a/modules/borg-server.nix
+++ b/modules/borg-server.nix
@ -76,20 +76,20 @@ in
      enable = true;
      ports = [ cfg.sshPort ];
      settings = {
-        # SSH hardening for borg users
-        Match = "Group borg-server";
-        PasswordAuthentication = false;
-        PubkeyAuthentication = true;
-        PermitRootLogin = "no";
-        X11Forwarding = false;
-        AllowAgentForwarding = false;
-        AllowTcpForwarding = false;
-        PermitTunnel = "no";
-        
        # Keep connection alive settings
        ClientAliveInterval = 10;
        ClientAliveCountMax = 30;
      };
+      extraConfig = ''
+        # SSH hardening for borg users
+        Match Group borg-server
+          PasswordAuthentication no
+          PubkeyAuthentication yes
+          X11Forwarding no
+          AllowAgentForwarding no
+          AllowTcpForwarding no
+          PermitTunnel no
+      '';
    };

    # Open firewall port