ssh: only allow key authentication

pull/2/head
Tudor Roman 2023-06-04 20:54:46 +02:00
parent 2dbf1f6977
commit db53608a88
Signed by: tudor
SSH Key Fingerprint: SHA256:3CwS9plgXBecpXImPGxDIaSktUXBejbV/zerZMqzzBk
1 changed files with 5 additions and 1 deletions

View File

@ -9,7 +9,11 @@ with lib;
};
config = mkIf cfg.enable {
services.openssh.enable = true;
services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
};
networking.firewall.allowedTCPPorts = [ 22 ];
};
}