configure ssh server

FaustXVI · Dec 29, 2024 · 01de9fa · 01de9fa
1 parent b2bfbcc
commit 01de9fa
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/modules/hardware/network.nix b/modules/hardware/network.nix
@@ -22,12 +22,14 @@
   services = {
     openssh = {
       enable = true;
+      openFirewall = true;
       settings = {
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+        PermitRootLogin = "no";
         GatewayPorts = "yes";
+        StreamLocalBindUnlink="yes";
       };
-      extraConfig = ''
-        StreamLocalBindUnlink yes
-      '';
     };
   };
 }