Commit 7b67b5e7d086

Vincent Demeester <vincent@sbr.pm>
2025-06-27 15:20:35
systems: enableSSHAgentAuth by default
If a system doesn't want it, lib.mkForce is your friend. Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent c8744ea
Changed files (2)
systems
common
services
openssh.nix
kobe
extra.nix
systems/common/services/openssh.nix
@@ -14,4 +14,5 @@ _: {
     };
     sshguard.enable = true;
   };
+  security.pam.enableSSHAgentAuth = true;
 }
systems/kobe/extra.nix
@@ -44,9 +44,6 @@
     };
   };
 
-  # TODO: could be enable by default for all ?
-  security.pam.enableSSHAgentAuth = true;
-
   security.apparmor.enable = true;
   security.tpm2.enable = lib.mkForce false;
 }