security: disable SSH X11 forwarding on servers, keep on desktops

2026-08-27 13:33:57 +02:00 · 2026-08-26 18:14:43 +08:00
parent 212f45e2ca
commit 65ee1a001f
6 changed files with 36 additions and 1 deletions
@@ -0,0 +1,5 @@
+{
+  # Desktops keep X11 forwarding (current behavior, needed for GUI forwarding);
+  # servers default to off (see modules/nixos/base/ssh.nix).
+  services.openssh.settings.X11Forwarding = true;
+}