From: Dominik Kaiser <dominik-kaiser@mailbox.org>
Date: Sun, 16 Feb 2025 10:53:00 +0000 (+0100)
Subject: Disable root login on antares
X-Git-Url: https://git.dkaiser.de/?a=commitdiff_plain;h=6dfb9c4eb46ffda2b8c49a40f6b0b95c5f2adc95;p=config%2Fnixos.git

Disable root login on antares
---

diff --git a/hosts/antares/configuration.nix b/hosts/antares/configuration.nix
index 6e05e75..8d7be14 100644
--- a/hosts/antares/configuration.nix
+++ b/hosts/antares/configuration.nix
@@ -16,8 +16,11 @@
     efiSupport = true;
     efiInstallAsRemovable = true;
   };
-  services.openssh.enable = true;
-  services.openssh.passwordAuthentication = false;
+  services.openssh = {
+    enable = true;
+    passwordAuthentication = false;
+    permitRootLogin = false;
+  };
 
   networking.hostName = "antares";
   time.timeZone = "Europe/Berlin";
@@ -37,10 +40,6 @@
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICtL2eG098LhkFPR4N5e44XMq60uvCUCOuKMYs5zjg6f"
     ];
   };
-  users.users.root.openssh.authorizedKeys.keys = [
-    # change this to your ssh key
-    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICtL2eG098LhkFPR4N5e44XMq60uvCUCOuKMYs5zjg6f dk@nixos"
-  ];
 
   system.stateVersion = "24.05";
 }