From f7f53feb09d54ce81a6bedc3dd460a06732f3c50 Mon Sep 17 00:00:00 2001
From: Mel <einebeere@gmail.com>
Date: Sun, 29 Dec 2024 21:59:47 +0100
Subject: Disable root login, lsit permitted SSH users

Signed-off-by: Mel <einebeere@gmail.com>
---
 configuration/configuration.nix | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

(limited to 'configuration')

diff --git a/configuration/configuration.nix b/configuration/configuration.nix
index ddac03b..4a0d0eb 100644
--- a/configuration/configuration.nix
+++ b/configuration/configuration.nix
@@ -42,7 +42,18 @@
     wget
   ];
 
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    settings = {
+      # i would disable this, but i don't know the ssh keys for all accounts :)
+      PasswordAuthentication = true;
+      AllowUsers = [
+        "mel"
+        "philip"
+      ];
+      PermitRootLogin = "no";
+    };
+  };
 
   system.stateVersion = "24.11";
 }
-- 
cgit 1.4.1