From b571449efe1b134bd47f9d1b2927109248552736 Mon Sep 17 00:00:00 2001
From: Inex Code <inex.code@selfprivacy.org>
Date: Fri, 28 Mar 2025 17:08:09 +0300
Subject: [PATCH] refactor: Disable SSH login using password

---
 configuration.nix      | 3 +--
 selfprivacy-module.nix | 7 -------
 2 files changed, 1 insertion(+), 9 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index 025d3c3..0fd3250 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -99,9 +99,8 @@ in
   services.openssh = {
     enable = config.selfprivacy.ssh.enable;
     settings = {
-      PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication;
+      PasswordAuthentication = false;
       PermitRootLogin = "yes";
-      LoginGraceTime = 0;
     };
     openFirewall = false;
 
diff --git a/selfprivacy-module.nix b/selfprivacy-module.nix
index 55842c9..a90435b 100644
--- a/selfprivacy-module.nix
+++ b/selfprivacy-module.nix
@@ -108,13 +108,6 @@ with lib;
         type = types.nullOr (types.listOf types.str);
         default = [ "" ];
       };
-      passwordAuthentication = mkOption {
-        description = ''
-          Password authentication for SSH
-        '';
-        default = false;
-        type = types.nullOr types.bool;
-      };
     };
     ###########
     #  Users  #