nixos/services/sshd: disable password and root login

2026-05-02 21:54:00 +02:00
parent 463c3659fa
commit 6cd9ae97ea
1 changed files with 7 additions and 1 deletions
@@ -103,7 +103,13 @@ in
  services = {
    openssh = {
      enable = true;
-      settings.ClientAliveInterval = 300;
+
+      settings = {
+        ClientAliveInterval = 300;
+        KbdInteractiveAuthentication = false;
+        PasswordAuthentication = false;
+        PermitRootLogin = "no";
+      };
    };
  };