summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJoey Hess2015-12-31 03:06:22 -0400
committerJoey Hess2015-12-31 03:06:22 -0400
commit135b360c2c94a02727682f465f9208e70f7055b7 (patch)
tree1c93b7ac5f66fa971197daa940043b579ac767fc
parente95e2c7db15675d54e732c4115949cca0f330cf6 (diff)
oh, I already disable ssh password by default, NM
-rw-r--r--config-joey.hs4
1 files changed, 0 insertions, 4 deletions
diff --git a/config-joey.hs b/config-joey.hs
index 072e9699..7560ca8b 100644
--- a/config-joey.hs
+++ b/config-joey.hs
@@ -117,7 +117,6 @@ clam = standardSystem "clam.kitenet.net" Unstable "amd64"
, (SshRsa, "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJybAjUPUWIhvVMmer8K5ZgdfI54DM6vc8Mzw+5KmVKL0TwkvzbR1HAB4heyMGtN1F8YzkWhsI3/Txh+MQUJ+i4u8SvSYc6D1q3j3ZyCi06wZ3DJS25tZrOM/thOOA1DFA4Hhb0uI/1Kg8PguNNNSMXn8F7q3F6cFQizYgszs6z6ktiST/BTC+IXWovhcnn2vQXXU8FTcTsqBFqA5dEjZbp1WDzqp3km84ZyXGmoVlpqzXeMvlkWTIshYiQjXIwPOkALzlGYjp1lw1OaxPVI1IGFcgCbIWQQWoCReb+genX2VaR+odAYXjaOdRx0lQj7UCPTBCpqMyzBMLtT5Yiaqh")
, (SshEcdsa, "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPhfvcOuw0Yt+MnsFc4TI2gWkKi62Eajxz+TgbHMO/uRTYF8c5V8fOI3o+J/3m5+lT0S5o8j8a7xIC3COvi+AVw=")
]
- & Ssh.permitRootLogin WithoutPassword
& Apt.unattendedUpgrades
& Network.ipv6to4
& Systemd.persistentJournal
@@ -148,7 +147,6 @@ oyster = standardSystem "oyster.kitenet.net" Unstable "amd64"
& Ssh.hostKeys hostContext
[ (SshEcdsa, "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBP0ws/IxQegVU0RhqnIm5A/vRSPTO70wD4o2Bd1jL970dTetNyXzvWGe1spEbLjIYSLIO7WvOBSE5RhplBKFMUU=")
]
- & Ssh.permitRootLogin WithoutPassword
& Apt.unattendedUpgrades
& Network.ipv6to4
& Systemd.persistentJournal
@@ -241,7 +239,6 @@ kite = standardSystemUnhardened "kite.kitenet.net" Testing "amd64"
& Systemd.persistentJournal
& Journald.systemMaxUse "500MiB"
& Ssh.passwordAuthentication True
- & Ssh.permitRootLogin WithoutPassword
-- Since ssh password authentication is allowed:
& Fail2Ban.installed
& Obnam.backupEncrypted "/" (Cron.Times "33 1 * * *")
@@ -327,7 +324,6 @@ elephant = standardSystem "elephant.kitenet.net" Unstable "amd64"
, (SshEcdsa, "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAJkoPRhUGT8EId6m37uBdYEtq42VNwslKnc9mmO+89ody066q6seHKeFY6ImfwjcyIjM30RTzEwftuVNQnbEB0=")
, (SshEd25519, "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB6VtXi0uygxZeCo26n6PuCTlSFCBcwRifv6N8HdWh2Z")
]
- & Ssh.permitRootLogin WithoutPassword
& Grub.chainPVGrub "hd0,0" "xen/xvda1" 30
& Postfix.satellite