From 781ea4f7b5053a3d9f30f700e1500aaea052bbd3 Mon Sep 17 00:00:00 2001
From: ShatteredMINT <shatteredmint@gmail.com>
Date: Tue, 7 Jul 2026 20:55:02 +0200
Subject: [PATCH] disable all but public key auth for ssh

---
 configuration.nix | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index fa1c3d8..0582173 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -103,10 +103,9 @@
     enable = true;
     ports = [ 22 ];
     settings = {
-      PasswordAuthentication = true;
+      PasswordAuthentication = false;
       KbdInteractiveAuthentication = false;
-      # AllowUsers = [ "backup" ];
-      # UseDns = true;
+      AuthenticationMethods = "publickey";
       X11Forwarding = false;
       PermitRootLogin = "no";
     };