From f31f9f37907c031091f208d30bd5f2e5011eebb0 Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Sat, 25 Dec 2021 20:07:25 +0100
Subject: l green.r: add ssh workaround for android yubikey

---
 lass/1systems/green/config.nix | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'lass/1systems/green')

diff --git a/lass/1systems/green/config.nix b/lass/1systems/green/config.nix
index e9928895..5cf7d924 100644
--- a/lass/1systems/green/config.nix
+++ b/lass/1systems/green/config.nix
@@ -87,4 +87,10 @@ with import <stockholm/lib>;
   krebs.iptables.tables.nat.PREROUTING.rules = [
     { predicate = "-i eth0 -p tcp -m tcp --dport 22"; target = "ACCEPT"; precedence = 101; }
   ];
+
+  # workaround for ssh access from yubikey via android
+  services.openssh.extraConfig = ''
+    HostKeyAlgorithms +ssh-rsa
+    PubkeyAcceptedAlgorithms +ssh-rsa
+  '';
 }
-- 
cgit v1.2.3