sshd: disable systemd integration

2024-05-29 15:57:19 +00:00
parent d4dfcd6510
commit c40ec1990a
1 changed files with 1 additions and 0 deletions
--- a/hosts/common/ssh.nix
+++ b/hosts/common/ssh.nix
@@ -25,6 +25,7 @@ in
    enable = true;
    settings.PermitRootLogin = "no";
    settings.PasswordAuthentication = false;
+    settings.UsePAM = false;  #< notably, disables systemd session tracking; incidentally disables pam_mount, etc.
  };
  sane.ports.ports."22" = {
    protocol = [ "tcp" ];