From 6cd9ae97ea62dc52c6a06d2b26075d9b3d4edf50 Mon Sep 17 00:00:00 2001
From: javalsai <jvssxxi@gmail.com>
Date: Sat, 2 May 2026 21:54:00 +0200
Subject: [PATCH] nixos/services/sshd: disable password and root login

---
 nixos/common.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/nixos/common.nix b/nixos/common.nix
index b4ae10c..e4fd557 100644
--- a/nixos/common.nix
+++ b/nixos/common.nix
@@ -103,7 +103,13 @@ in
   services = {
     openssh = {
       enable = true;
-      settings.ClientAliveInterval = 300;
+
+      settings = {
+        ClientAliveInterval = 300;
+        KbdInteractiveAuthentication = false;
+        PasswordAuthentication = false;
+        PermitRootLogin = "no";
+      };
     };
   };