diff options
| author | Mel <einebeere@gmail.com> | 2024-12-29 21:59:47 +0100 |
|---|---|---|
| committer | Mel <einebeere@gmail.com> | 2024-12-29 21:59:47 +0100 |
| commit | f7f53feb09d54ce81a6bedc3dd460a06732f3c50 (patch) | |
| tree | 64b2f0915bce9cd867a04313a82a675c0ad6352c /configuration | |
| parent | dc4d72f064414568ff5002f9366df6c2fdba7994 (diff) | |
| download | specimen-f7f53feb09d54ce81a6bedc3dd460a06732f3c50.tar.zst specimen-f7f53feb09d54ce81a6bedc3dd460a06732f3c50.zip | |
Disable root login, lsit permitted SSH users
Signed-off-by: Mel <einebeere@gmail.com>
Diffstat (limited to 'configuration')
| -rw-r--r-- | configuration/configuration.nix | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/configuration/configuration.nix b/configuration/configuration.nix index ddac03b..4a0d0eb 100644 --- a/configuration/configuration.nix +++ b/configuration/configuration.nix @@ -42,7 +42,18 @@ wget ]; - services.openssh.enable = true; + services.openssh = { + enable = true; + settings = { + # i would disable this, but i don't know the ssh keys for all accounts :) + PasswordAuthentication = true; + AllowUsers = [ + "mel" + "philip" + ]; + PermitRootLogin = "no"; + }; + }; system.stateVersion = "24.11"; } |