summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--hosts/kay/modules/sshfwd.nix6
1 files changed, 3 insertions, 3 deletions
diff --git a/hosts/kay/modules/sshfwd.nix b/hosts/kay/modules/sshfwd.nix
index 0f0d3c3..a25854d 100644
--- a/hosts/kay/modules/sshfwd.nix
+++ b/hosts/kay/modules/sshfwd.nix
@@ -17,12 +17,12 @@ in {
services.openssh.extraConfig = ''
Match Group ${group}
- ForceCommand echo 'this account is only usable for forwarding'
+ ForceCommand echo 'this account is only usable for remote forwarding'
PermitTunnel no
AllowAgentForwarding no
X11Forwarding no
- AllowTcpForwarding yes
- GatewayPorts yes
+ AllowTcpForwarding remote
+ GatewayPorts clientspecified
'';
}