From 97203c35801b51c3b0e5945531f868ae9e3a8506 Mon Sep 17 00:00:00 2001 From: Ciapa Date: Sun, 16 Apr 2023 20:36:14 +0000 Subject: [PATCH] Fix deprecation in OpenSSH Module --- modules/base/ssh.nix | 37 ++++++++++++++++++------------------- 1 file changed, 18 insertions(+), 19 deletions(-) diff --git a/modules/base/ssh.nix b/modules/base/ssh.nix index 9616bc2..70d332e 100644 --- a/modules/base/ssh.nix +++ b/modules/base/ssh.nix @@ -7,25 +7,24 @@ settings = { PasswordAuthentication = false; PermitRootLogin = "prohibit-password"; + Ciphers = [ + "chacha20-poly1305@openssh.com" + "aes256-gcm@openssh.com" + "aes256-ctr" + "aes128-gcm@openssh.com" + ]; + Macs = [ + "umac-128-etm@openssh.com" + "hmac-sha2-256-etm@openssh.com" + "hmac-sha2-512-etm@openssh.com" + "hmac-sha2-512" + ]; + KexAlgorithms = [ + "curve25519-sha256@libssh.org" + "diffie-hellman-group16-sha512" + "diffie-hellman-group18-sha512" + "curve25519-sha256" + ]; }; - - ciphers = [ - "chacha20-poly1305@openssh.com" - "aes256-gcm@openssh.com" - "aes256-ctr" - "aes128-gcm@openssh.com" - ]; - macs = [ - "umac-128-etm@openssh.com" - "hmac-sha2-256-etm@openssh.com" - "hmac-sha2-512-etm@openssh.com" - "hmac-sha2-512" - ]; - kexAlgorithms = [ - "curve25519-sha256@libssh.org" - "diffie-hellman-group16-sha512" - "diffie-hellman-group18-sha512" - "curve25519-sha256" - ]; }; }