fix: Patch sshd PAM policy to relax login restrictions

lpchaim · Oct 8, 2024 · c1b186c · c1b186c
1 parent 55843a4
commit c1b186c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/nixos/security/default.nix b/modules/nixos/security/default.nix
@@ -32,6 +32,7 @@ lib.lpchaim.mkModule {
           config.security.pam.services.${svc}.text;
       in {
         "pam.d/login".text = lib.mkIf cfg.u2f.relaxed (lib.mkForce (patch "login"));
+        "pam.d/sshd".text = lib.mkForce (patch "sshd");
         "pam.d/sudo".text = lib.mkForce (patch "sudo");
       };
       security.pam = {