misc: initial commit

2024-12-28 19:33:49 -05:00 · 2024-12-28 19:33:49 -05:00 · 964b99b28d
commit 964b99b28d
32 changed files with 1675 additions and 0 deletions
--- a/nixos/hardening.nix
+++ b/nixos/hardening.nix
@ -0,0 +1,23 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: {
+  nix.settings.allowed-users = ["@wheel"];
+  security.sudo.execWheelOnly = true;
+  services.openssh = {
+    allowSFTP = false;
+    settings = {
+      ChallengeResponseAuthentication = false;
+      PasswordAuthentication = false;
+    };
+    extraConfig = ''
+      AllowTcpForwarding yes
+      X11Forwarding no
+      AllowAgentForwarding no
+      AllowStreamLocalForwarding no
+      AuthenticationMethods publickey
+    '';
+  };
+}