Always keep openssh port open

2022-08-14 19:23:58 +02:00 · 2022-08-14 19:23:58 +02:00 · c6d78a6ff9
parent dec9e54872
commit c6d78a6ff9
1 changed files with 2 additions and 1 deletions
--- a/modules/core/services.nix
+++ b/modules/core/services.nix
@ -4,7 +4,8 @@
  # For rage encryption, all hosts need a ssh key pair
  services.openssh = {
    enable = true;
-    openFirewall = lib.mkDefault false;
+    openFirewall = lib.mkDefault true;
+    passwordAuthentication = false;
  };

  # Service that makes Out of Memory Killer more effective