nixos/sshd: Disable authorizedKeysInHomedir if stateVersion >= 24.11

Co-authored-by: Valentin Gagarin <valentin@gagarin.work>
2024-01-09 23:50:13 +00:00
parent c1c89b84e7
commit 1f08575e3a
3 changed files with 14 additions and 3 deletions
--- a/nixos/modules/services/networking/ssh/sshd.nix
+++ b/nixos/modules/services/networking/ssh/sshd.nix
@@ -302,7 +302,8 @@ in

      authorizedKeysInHomedir = lib.mkOption {
        type = lib.types.bool;
-        default = true;
+        default = lib.versionOlder config.system.stateVersion "24.11";
+        defaultText = lib.literalMD "`false` unless [](#opt-system.stateVersion) is 24.05 or older";
        description = ''
          Enables the use of the `~/.ssh/authorized_keys` file.