infra/services/openssh.nix

19 lines
350 B
Nix

{ ... }:
{
services = {
openssh = {
enable = true;
settings = {
PermitEmptyPasswords = "no";
PermitRootLogin = "prohibit-password";
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
};
};
sshguard = {
enable = true;
services = [ "sshd" ];
};
};
}