From d8be8b72ab7705568caa63dd796a3f3741d3e00a Mon Sep 17 00:00:00 2001
From: soraefir <soraefir+git@helcel>
Date: Sat, 2 May 2026 22:05:58 +0200
Subject: [PATCH] Fix ssh

---
 systems/gateway/default.nix | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/systems/gateway/default.nix b/systems/gateway/default.nix
index 43441b7..581c71f 100644
--- a/systems/gateway/default.nix
+++ b/systems/gateway/default.nix
@@ -7,8 +7,15 @@ let
 in {
   imports = [ ./hardware.nix ];
 
-  services.openssh.enable = true;
-  services.openssh.ports = [ 422 ];
+  services.openssh = {
+    enable = true;
+    ports = [ 422 ];
+    banner = "";
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "prohibit-password";
+    };
+  };
   users.users = lib.mapAttrs (name: userList: {
     openssh.authorizedKeys.keys = lib.unique (
       lib.concatMap (u: if u ? pubssh then [ u.pubssh ] else []) userList