From fae044fc5d403908b638100be1fddeb205d97cfd Mon Sep 17 00:00:00 2001
From: Daniel Langbein <daniel@systemli.org>
Date: Fri, 18 Aug 2023 19:41:21 +0200
Subject: [PATCH] enable SSH server

---
 yodaTux/configuration.nix | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/yodaTux/configuration.nix b/yodaTux/configuration.nix
index 04f531f..d3de269 100644
--- a/yodaTux/configuration.nix
+++ b/yodaTux/configuration.nix
@@ -151,8 +151,14 @@
 
   # List services that you want to enable:
 
-  # Enable the OpenSSH daemon.
-  # services.openssh.enable = true;
+  # Enable SSH server.
+  services.openssh = {
+    enable = true;
+    # Forbid root login through SSH.
+    settings.PermitRootLogin = "no";
+    # Use authorized keys only.
+    settings.PasswordAuthentication = false;
+  };
 
   # Open ports in the firewall.
   # networking.firewall.allowedTCPPorts = [ ... ];