Browse Source

nodes: allow ssh only for vip cluster users

main
Dustin Frisch 6 months ago
parent
commit
1d831a1297
No known key found for this signature in database GPG Key ID: B4C3BF012D9B26BE
  1. 4
      machines/node/users.nix

4
machines/node/users.nix

@ -23,7 +23,9 @@ with lib;
extraConfig = '' extraConfig = ''
IgnoreRhosts no IgnoreRhosts no
Match Group cluster
DenyGroups !vip,cluster
Match Group vip
HostbasedAuthentication yes HostbasedAuthentication yes
HostbasedAcceptedAlgorithms ssh-ed25519* HostbasedAcceptedAlgorithms ssh-ed25519*
HostbasedUsesNameFromPacketOnly yes HostbasedUsesNameFromPacketOnly yes

Loading…
Cancel
Save