summaryrefslogtreecommitdiffstats
path: root/lass/1systems/green
diff options
context:
space:
mode:
authorlassulus <lassulus@lassul.us>2021-12-25 20:07:25 +0100
committerlassulus <lassulus@lassul.us>2021-12-25 20:07:25 +0100
commitf31f9f37907c031091f208d30bd5f2e5011eebb0 (patch)
treed32e3271fb3d03d43e39b93a557f841279e8cfdc /lass/1systems/green
parent4eab43449a44729c8973d057f72b4c982a17ea55 (diff)
l green.r: add ssh workaround for android yubikey
Diffstat (limited to 'lass/1systems/green')
-rw-r--r--lass/1systems/green/config.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/lass/1systems/green/config.nix b/lass/1systems/green/config.nix
index e9928895b..5cf7d9242 100644
--- a/lass/1systems/green/config.nix
+++ b/lass/1systems/green/config.nix
@@ -87,4 +87,10 @@ with import <stockholm/lib>;
krebs.iptables.tables.nat.PREROUTING.rules = [
{ predicate = "-i eth0 -p tcp -m tcp --dport 22"; target = "ACCEPT"; precedence = 101; }
];
+
+ # workaround for ssh access from yubikey via android
+ services.openssh.extraConfig = ''
+ HostKeyAlgorithms +ssh-rsa
+ PubkeyAcceptedAlgorithms +ssh-rsa
+ '';
}