From 27405c21eef9eb4f2ad2296b1bf2c04f9286c9b2 Mon Sep 17 00:00:00 2001
From: javalsai <jvssxxi@gmail.com>
Date: Sat, 2 May 2026 21:54:00 +0200
Subject: [PATCH] nixos/services/sshd: disable password and root login

---
 nixos/common.nix | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/nixos/common.nix b/nixos/common.nix
index 4ff3435..c5d4dad 100644
--- a/nixos/common.nix
+++ b/nixos/common.nix
@@ -101,6 +101,19 @@ in
     };
   };
 
+  services = {
+    openssh = {
+      enable = true;
+
+      settings = {
+        ClientAliveInterval = 300;
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+        PermitRootLogin = "no";
+      };
+    };
+  };
+
   virtualisation.podman.enable = true;
 
   zramSwap = {