Disable password auth in SSH and root login

More secure.
This commit is contained in:
Eli Ribble 2025-01-05 19:06:15 -07:00
parent a154a67ac8
commit 5421eccc0b
1 changed files with 7 additions and 1 deletions

View File

@ -65,7 +65,13 @@
enable = true;
network.enable = true;
};
services.openssh.enable = true;
services.openssh = {
enable = true;
# require public key authentication for better security
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
settings.PermitRootLogin = "no";
};
services.sovr-server = {
enable = true;
sessionSecret = "secret";