From 2b81a311bb6e2ea1aefb1abd4ea52cdab6c0038d Mon Sep 17 00:00:00 2001
From: Hendrik Sokolowski <hensoko@gssws.de>
Date: Fri, 6 May 2022 18:38:55 +0200
Subject: [PATCH] Prohibit root login with password when server module is used
---
modules/server/default.nix | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/modules/server/default.nix b/modules/server/default.nix
index 3d96ffb3..03b882c9 100644
--- a/modules/server/default.nix
+++ b/modules/server/default.nix
@@ -12,7 +12,7 @@ in
config = mkIf cfg.enable {
services.openssh = {
enable = true;
- permitRootLogin = "no";
+ permitRootLogin = lib.mkForce "prohibit-password";
passwordAuthentication = true;
openFirewall = true;
};