From 2ae1dc3031cde0350d642b37824aa265c1528836 Mon Sep 17 00:00:00 2001
From: Dict Xiong <me@beardic.cn>
Date: Thu, 30 May 2024 09:49:24 +0800
Subject: [PATCH] fix(nasp): disable ssh password auth

---
 hosts/modules/nasp.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/modules/nasp.nix b/hosts/modules/nasp.nix
index cb34a2a..64e2ab8 100644
--- a/hosts/modules/nasp.nix
+++ b/hosts/modules/nasp.nix
@@ -75,6 +75,7 @@ in
       services.cron.enable = true;
       services.openssh.enable = true;
       services.openssh.settings.PermitRootLogin = "prohibit-password";
+      services.openssh.settings.PasswordAuthentication = false;
       services.openssh.authorizedKeysFiles = [ ".ssh/authorized_keys2" ];
       services.openssh.ports = [ 12022 ];
       systemd.targets.sleep.enable = false;