ssh: disable password auth

This commit is contained in:
Daniel Langbein 2023-11-03 14:56:19 +01:00
parent 18c1f676d1
commit a2c46f1eee
Signed by: langfingaz
GPG Key ID: 6C47C753F0823002

View File

@ -64,7 +64,10 @@
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;
services.openssh.enable = true; services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
};
users.users.root.openssh.authorizedKeys.keys = [ users.users.root.openssh.authorizedKeys.keys = [
(builtins.readFile ./nitrokey.pub) (builtins.readFile ./nitrokey.pub)
]; ];