Disable SSH password authentication

This commit is contained in:
coolneng 2023-02-20 17:13:12 +01:00
parent 5d2bec9d58
commit 68fa9ec21e
Signed by: coolneng
GPG Key ID: 9893DA236405AF57
1 changed files with 4 additions and 0 deletions

View File

@ -22,6 +22,7 @@ with pkgs;
services.openssh = { services.openssh = {
enable = true; enable = true;
permitRootLogin = "yes"; permitRootLogin = "yes";
passwordAuthentication = false;
}; };
# Cleanup tmp on startup # Cleanup tmp on startup
@ -33,7 +34,10 @@ with pkgs;
home = "/home/coolneng"; home = "/home/coolneng";
extraGroups = [ "wheel" "docker" ]; extraGroups = [ "wheel" "docker" ];
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = [
# panacea
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFRqINHR7/zc+c3/PuR+NeSsBHXXzBiEtFWSK6QaxQTW coolneng@panacea" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFRqINHR7/zc+c3/PuR+NeSsBHXXzBiEtFWSK6QaxQTW coolneng@panacea"
# caravanserai
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTBWNtNp+vI2So4vISZX/yQv754ZzXqobFgUP3zk4FY zion"
]; ];
shell = "${fish}/bin/fish"; shell = "${fish}/bin/fish";
}; };