Disable root login, lsit permitted SSH users

Signed-off-by: Mel <einebeere@gmail.com>

1 files changed, 12 insertions, 1 deletions

diff --git a/configuration/configuration.nix b/configuration/configuration.nix
index ddac03b..4a0d0eb 100644
--- a/configuration/configuration.nix
+++ b/configuration/configuration.nix
@@ -42,7 +42,18 @@
     wget
   ];
 
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    settings = {
+      # i would disable this, but i don't know the ssh keys for all accounts :)
+      PasswordAuthentication = true;
+      AllowUsers = [
+        "mel"
+        "philip"
+      ];
+      PermitRootLogin = "no";
+    };
+  };
 
   system.stateVersion = "24.11";
 }