l green.r: add ssh workaround for android yubikey

2021-12-25 20:07:25 +01:00 · 2021-12-25 20:07:25 +01:00 · f31f9f3790
commit f31f9f3790
parent 4eab43449a
1 changed files with 6 additions and 0 deletions
--- a/lass/1systems/green/config.nix
+++ b/lass/1systems/green/config.nix
@ -87,4 +87,10 @@ with import <stockholm/lib>;
  krebs.iptables.tables.nat.PREROUTING.rules = [
    { predicate = "-i eth0 -p tcp -m tcp --dport 22"; target = "ACCEPT"; precedence = 101; }
  ];
+
+  # workaround for ssh access from yubikey via android
+  services.openssh.extraConfig = ''
+    HostKeyAlgorithms +ssh-rsa
+    PubkeyAcceptedAlgorithms +ssh-rsa
+  '';
 }