ssh: disable password login

This commit is contained in:
Rouven Seifert 2024-05-06 11:12:19 +02:00
parent 7630dc4494
commit 81ac3b4c0d
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
2 changed files with 10 additions and 7 deletions

View file

@ -21,12 +21,12 @@
boot.kernelPackages = pkgs.linuxPackagesFor (pkgs.linux_6_6.override { boot.kernelPackages = pkgs.linuxPackagesFor (pkgs.linux_6_6.override {
argsOverride = rec { argsOverride = rec {
src = pkgs.fetchurl { src = pkgs.fetchurl {
url = "mirror://kernel/linux/kernel/v6.x/linux-${version}.tar.xz"; url = "mirror://kernel/linux/kernel/v6.x/linux-${version}.tar.xz";
sha256 = "sha256-Y55QBg48jyPtAXyxDP6sxrqI/1WDgSu3aFm0zGoSgpE="; sha256 = "sha256-Y55QBg48jyPtAXyxDP6sxrqI/1WDgSu3aFm0zGoSgpE=";
}; };
version = "6.6.27"; version = "6.6.27";
modDirVersion = "6.6.27"; modDirVersion = "6.6.27";
}; };
}); });
services.zfs = { services.zfs = {
@ -53,9 +53,6 @@
value = "10000"; value = "10000";
} }
]; ];
# Enable the OpenSSH daemon.
services.openssh.enable = true;
services.openssh.settings.PermitRootLogin = "yes";
systemd = { systemd = {
services.nix-daemon.serviceConfig = { services.nix-daemon.serviceConfig = {

View file

@ -29,7 +29,13 @@
}; };
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh.enable = true; services.openssh = {
enable = true;
settings = {
PermitRootLogin = "yes";
PasswordAuthentication = "no";
};
};
programs.mosh.enable = true; programs.mosh.enable = true;
# vs code server # vs code server