irl/nix-configs
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: disallow passwords for ssh

Browse source
This commit is contained in:
Iain Learmonth 2025-06-10 22:45:06 +01:00
parent d3efa331f2
commit 3bb3600c6b
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nixos/hosts/homeserver/default.nix
View file

@ -20,7 +20,12 @@
services.xserver.xkb.layout = "us"; services.xserver.xkb.layout = "us";
services.openssh.enable = true; services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
settings.PermitRootLogin = "no";
};
networking.firewall.allowedTCPPorts = [ 22 ]; networking.firewall.allowedTCPPorts = [ 22 ];
networking.firewall.allowedUDPPorts = [ ]; networking.firewall.allowedUDPPorts = [ ];