From 2b81a311bb6e2ea1aefb1abd4ea52cdab6c0038d Mon Sep 17 00:00:00 2001
From: Hendrik Sokolowski <hensoko@gssws.de>
Date: Fri, 6 May 2022 18:38:55 +0200
Subject: [PATCH] Prohibit root login with password when server module is used

---
 modules/server/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/server/default.nix b/modules/server/default.nix
index 3d96ffb3..03b882c9 100644
--- a/modules/server/default.nix
+++ b/modules/server/default.nix
@@ -12,7 +12,7 @@ in
   config = mkIf cfg.enable {
     services.openssh = {
       enable = true;
-      permitRootLogin = "no";
+      permitRootLogin = lib.mkForce "prohibit-password";
       passwordAuthentication = true;
       openFirewall = true;
     };