back to secure settings

This commit is contained in:
Christoph Cullmann 2024-01-11 23:45:38 +01:00
parent b32daf32dd
commit fb3dbe0a6a

View file

@ -71,9 +71,8 @@ in
services.openssh = { services.openssh = {
# enable with public key only auth # enable with public key only auth
enable = true; enable = true;
settings.PasswordAuthentication = true; settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = true; settings.KbdInteractiveAuthentication = false;
settings.PermitRootLogin = "yes";
# only ed25519 keys, make them persistent # only ed25519 keys, make them persistent
hostKeys = [{ hostKeys = [{