refactor: Disable SSH login using password
This commit is contained in:
@@ -99,9 +99,8 @@ in
|
|||||||
services.openssh = {
|
services.openssh = {
|
||||||
enable = config.selfprivacy.ssh.enable;
|
enable = config.selfprivacy.ssh.enable;
|
||||||
settings = {
|
settings = {
|
||||||
PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication;
|
PasswordAuthentication = false;
|
||||||
PermitRootLogin = "yes";
|
PermitRootLogin = "yes";
|
||||||
LoginGraceTime = 0;
|
|
||||||
};
|
};
|
||||||
openFirewall = false;
|
openFirewall = false;
|
||||||
|
|
||||||
|
@@ -108,13 +108,6 @@ with lib;
|
|||||||
type = types.nullOr (types.listOf types.str);
|
type = types.nullOr (types.listOf types.str);
|
||||||
default = [ "" ];
|
default = [ "" ];
|
||||||
};
|
};
|
||||||
passwordAuthentication = mkOption {
|
|
||||||
description = ''
|
|
||||||
Password authentication for SSH
|
|
||||||
'';
|
|
||||||
default = false;
|
|
||||||
type = types.nullOr types.bool;
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
###########
|
###########
|
||||||
# Users #
|
# Users #
|
||||||
|
Reference in New Issue
Block a user