Fix ssh

2026-05-02 22:05:58 +02:00
parent 59709bcde9
commit d8be8b72ab
1 changed files with 9 additions and 2 deletions
--- a/systems/gateway/default.nix
+++ b/systems/gateway/default.nix
@@ -7,8 +7,15 @@ let
 in {
  imports = [ ./hardware.nix ];

-  services.openssh.enable = true;
-  services.openssh.ports = [ 422 ];
+  services.openssh = {
+    enable = true;
+    ports = [ 422 ];
+    banner = "";
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "prohibit-password";
+    };
+  };
  users.users = lib.mapAttrs (name: userList: {
    openssh.authorizedKeys.keys = lib.unique (
      lib.concatMap (u: if u ? pubssh then [ u.pubssh ] else []) userList