fix(nasp): disable ssh password auth

This commit is contained in:
Dict Xiong 2024-05-30 09:49:24 +08:00
parent 0d842b7dc9
commit 2ae1dc3031

View File

@ -75,6 +75,7 @@ in
services.cron.enable = true; services.cron.enable = true;
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.settings.PermitRootLogin = "prohibit-password"; services.openssh.settings.PermitRootLogin = "prohibit-password";
services.openssh.settings.PasswordAuthentication = false;
services.openssh.authorizedKeysFiles = [ ".ssh/authorized_keys2" ]; services.openssh.authorizedKeysFiles = [ ".ssh/authorized_keys2" ];
services.openssh.ports = [ 12022 ]; services.openssh.ports = [ 12022 ];
systemd.targets.sleep.enable = false; systemd.targets.sleep.enable = false;