core: disable SSH passwordAuthentication by default

This commit is contained in:
teutat3s 2022-10-05 11:58:26 +02:00
parent f0c12e38ee
commit 97d88096e8
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
2 changed files with 1 additions and 1 deletions

View file

@ -7,6 +7,7 @@
# If you don't want the host to have SSH actually opened up to the net,
# set `services.openssh.openFirewall` to false in your config.
openFirewall = lib.mkDefault true;
passwordAuthentication = false;
};
# Service that makes Out of Memory Killer more effective

View file

@ -39,7 +39,6 @@ in
# fileSystems."/".options = [ "noexec" ];
services.openssh = {
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
extraConfig = ''
AllowTcpForwarding yes