From 2ced95087c480f98040c09fe3643911c8c3b2868 Mon Sep 17 00:00:00 2001 From: "quentin@aristote.fr" Date: Sat, 17 Jan 2026 21:14:29 +0100 Subject: ssh: harden MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Flake lock file updates: • Updated input 'my-nixpkgs': 'github:qaristote/my-nixpkgs/06986b3a0d884cbaed54cf307c2e3bf2902f4a7b' (2025-12-24) → 'github:qaristote/my-nixpkgs/920d3342d55312937fed357f9abe165bb2aa281b' (2026-01-17) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/9ef261221d1e72399f2036786498d78c38185c46' (2025-12-28) → 'github:NixOS/nixpkgs/d4fa45dc2d4d32c10cb7c6b530a6b4b7d2429442' (2026-01-15) --- config/services/sshproxy/default.nix | 5 ----- flake.lock | 12 ++++++------ 2 files changed, 6 insertions(+), 11 deletions(-) diff --git a/config/services/sshproxy/default.nix b/config/services/sshproxy/default.nix index 7bfbc62..24d29c4 100644 --- a/config/services/sshproxy/default.nix +++ b/config/services/sshproxy/default.nix @@ -18,10 +18,5 @@ Match user sshjump AllowTcpForwarding yes AllowAgentForwarding yes - PasswordAuthentication no - PermitTunnel no - GatewayPorts no - PermitTTY no - X11Forwarding no ''; } diff --git a/flake.lock b/flake.lock index 0b509aa..5feda63 100644 --- a/flake.lock +++ b/flake.lock @@ -270,11 +270,11 @@ "nur": "nur" }, "locked": { - "lastModified": 1766570433, - "narHash": "sha256-CGcwkz/SOmZ8q/H1iorN78w3C2JmRct71MLvixFbhOE=", + "lastModified": 1768680671, + "narHash": "sha256-c/6oJfgBW5WNDlloaQtR1+QbiTGnHicMopTAiCy/FhY=", "owner": "qaristote", "repo": "my-nixpkgs", - "rev": "06986b3a0d884cbaed54cf307c2e3bf2902f4a7b", + "rev": "920d3342d55312937fed357f9abe165bb2aa281b", "type": "github" }, "original": { @@ -496,11 +496,11 @@ }, "nixpkgs_3": { "locked": { - "lastModified": 1766885793, - "narHash": "sha256-P6RVkrM9JLCW6xBjSwHfgTOQ1JwBUma5xe5LI8xAPC0=", + "lastModified": 1768484090, + "narHash": "sha256-HBIfbB9MF9oqQTxs/W5440mzVaYDBWU9tuX95aZ8h64=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "9ef261221d1e72399f2036786498d78c38185c46", + "rev": "d4fa45dc2d4d32c10cb7c6b530a6b4b7d2429442", "type": "github" }, "original": { -- cgit v1.2.3