From 0dff532d2893114a88ef60d543df9a33ca439b7b Mon Sep 17 00:00:00 2001
From: Bauke <me@bauke.xyz>
Date: Tue, 17 Oct 2023 14:42:05 +0200
Subject: [PATCH] Disable password authentication and root login.

---
 .bauke/nix/azedia/programs-services.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.bauke/nix/azedia/programs-services.nix b/.bauke/nix/azedia/programs-services.nix
index 4f6d8f0..06289b3 100644
--- a/.bauke/nix/azedia/programs-services.nix
+++ b/.bauke/nix/azedia/programs-services.nix
@@ -18,6 +18,12 @@
       };
     };
 
-    openssh.enable = true;
+    openssh = {
+      enable = true;
+      settings = {
+        PasswordAuthentication = false;
+        PermitRootLogin = "no";
+      };
+    };
   };
 }