nixos-config/services/openssh.nix
Christoph Heiss 376ccbbff0
services: openssh: Do not allow empty passwords
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2023-04-07 23:46:14 +02:00

14 lines
296 B
Nix

{
services.openssh = {
enable = true;
allowSFTP = true;
settings = {
KbdInteractiveAuthentication = false;
PasswordAuthentication = false;
PermitEmptyPasswords = false;
PermitRootLogin = "no";
UseDns = false;
X11Forwarding = false;
};
};
}