diff options
| author | lassulus <lassulus@lassul.us> | 2021-12-25 20:07:25 +0100 |
|---|---|---|
| committer | lassulus <lassulus@lassul.us> | 2021-12-25 20:07:25 +0100 |
| commit | f31f9f37907c031091f208d30bd5f2e5011eebb0 (patch) | |
| tree | d32e3271fb3d03d43e39b93a557f841279e8cfdc /lass/1systems | |
| parent | 4eab43449a44729c8973d057f72b4c982a17ea55 (diff) | |
l green.r: add ssh workaround for android yubikey
Diffstat (limited to 'lass/1systems')
| -rw-r--r-- | lass/1systems/green/config.nix | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/lass/1systems/green/config.nix b/lass/1systems/green/config.nix index e9928895..5cf7d924 100644 --- a/lass/1systems/green/config.nix +++ b/lass/1systems/green/config.nix @@ -87,4 +87,10 @@ with import <stockholm/lib>; krebs.iptables.tables.nat.PREROUTING.rules = [ { predicate = "-i eth0 -p tcp -m tcp --dport 22"; target = "ACCEPT"; precedence = 101; } ]; + + # workaround for ssh access from yubikey via android + services.openssh.extraConfig = '' + HostKeyAlgorithms +ssh-rsa + PubkeyAcceptedAlgorithms +ssh-rsa + ''; } |