nixosProfiles/common: enable ssh VerifyHostKeyDNS

2 months ago · 8b5d589e01
parent 408b23e03b
commit 8b5d589e01
1 changed files with 4 additions and 0 deletions
--- a/nix/nixosProfiles/common.nix
+++ b/nix/nixosProfiles/common.nix
@ -81,6 +81,10 @@ in
      git.enable = true;

      ssh = {
+        extraConfig = ''
+          Host *
+            VerifyHostKeyDNS yes
+        '';
        hostKeyAlgorithms = [
          "ssh-ed25519"
          "ssh-rsa"