services.openssh.settings.Ciphers

Allowed ciphers

Defaults to a curated set of algorithms. Set enableRecommendedAlgorithms to false to use upstream's defaults.

Declarations

nixos/modules/services/networking/ssh/sshd.nix

Type

null or (list of string)

Default

''
  if config.services.openssh.enableRecommendedAlgorithms then
    [
      "[email protected]"
      "[email protected]"
      "[email protected]"
      "aes256-ctr"
      "aes192-ctr"
      "aes128-ctr"
    ]
  else
    null;
''