From bebfe728de1f348e49a249cf7e3c66b7313442e7 Mon Sep 17 00:00:00 2001 From: Sebastien Bourdeauducq Date: Wed, 15 Jul 2020 12:32:57 +0800 Subject: [PATCH] nixops: set StreamLocalBindUnlink --- nixops/desktop.nix | 4 ++++ nixops/light.nix | 4 ++++ nixops/rpi.nix | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/nixops/desktop.nix b/nixops/desktop.nix index c8a2583..374f9cd 100644 --- a/nixops/desktop.nix +++ b/nixops/desktop.nix @@ -47,6 +47,10 @@ in services.openssh.enable = true; services.openssh.forwardX11 = true; services.openssh.passwordAuthentication = false; + services.openssh.extraConfig = + '' + StreamLocalBindUnlink yes + ''; hardware.u2f.enable = true; services.pcscd.enable = true; programs.ssh.extraConfig = diff --git a/nixops/light.nix b/nixops/light.nix index cfa0e8e..d03afbc 100644 --- a/nixops/light.nix +++ b/nixops/light.nix @@ -35,6 +35,10 @@ services.openssh.enable = true; services.openssh.forwardX11 = true; services.openssh.passwordAuthentication = false; + services.openssh.extraConfig = + '' + StreamLocalBindUnlink yes + ''; hardware.u2f.enable = true; services.pcscd.enable = true; programs.ssh.extraConfig = diff --git a/nixops/rpi.nix b/nixops/rpi.nix index b96bbc0..fe0aac0 100644 --- a/nixops/rpi.nix +++ b/nixops/rpi.nix @@ -35,6 +35,10 @@ in services.openssh.enable = true; services.openssh.passwordAuthentication = false; + services.openssh.extraConfig = + '' + StreamLocalBindUnlink yes + ''; networking.hostName = host; time.timeZone = "Asia/Hong_Kong";