summary refs log tree commit diff stats
path: root/system/services/openssh/new_module.nix
diff options
context:
space:
mode:
authorBenedikt Peetz <benedikt.peetz@b-peetz.de>2024-07-01 18:08:07 +0200
committerBenedikt Peetz <benedikt.peetz@b-peetz.de>2024-07-01 18:28:08 +0200
commit6fd9541ed6c13b14ee5d3c8e4b40079d828f3f63 (patch)
treeda9d7f896dcecf8a2e1fe4a1be880b4e22d841df /system/services/openssh/new_module.nix
parentfix(peertube): allow sane user creation (diff)
downloadnixos-server-6fd9541ed6c13b14ee5d3c8e4b40079d828f3f63.tar.gz
nixos-server-6fd9541ed6c13b14ee5d3c8e4b40079d828f3f63.zip
fix(system/services/openssh): Update to fix CVE-2024-6387 “regreSSHion” openssh-cve-fix
This should already be in 24.04, but it does not work currently :<.
Diffstat (limited to 'system/services/openssh/new_module.nix')
-rw-r--r--system/services/openssh/new_module.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/system/services/openssh/new_module.nix b/system/services/openssh/new_module.nix
new file mode 100644
index 0000000..878f9de
--- /dev/null
+++ b/system/services/openssh/new_module.nix
@@ -0,0 +1,7 @@
+{...} @ args: {
+  disabledModules = ["services/networking/ssh/sshd.nix"];
+
+  imports = [
+    "${args.nixpkgs-unstable}/nixos/modules/services/networking/ssh/sshd.nix"
+  ];
+}