summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNicholas Van Doorn <nick@nvandoorn.com>2025-04-23 15:40:55 -0700
committerNicholas Van Doorn <nick@nvandoorn.com>2025-04-23 15:46:28 -0700
commitc9ecd83efe9467a227bc98bf6af9565c958f72fa (patch)
treea91d81cdb7ddccbab39707369376fd3b95440320
parent24e6a0f73ff81e7deb4d3f6bf795073bb31fc3b2 (diff)
Disable root login
I think this is the default but I like to make it explicit.
-rw-r--r--configuration.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/configuration.nix b/configuration.nix
index 962d81b..941fdc0 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -130,6 +130,7 @@
# Enable the OpenSSH daemon.
services.openssh.enable = true;
services.openssh.settings.PasswordAuthentication = false;
+ services.openssh.settings.PermitRootLogin = "no";
# Open ports in the firewall.
networking.firewall.allowedTCPPorts = [