disable all but public key auth for ssh

2026-07-07 20:55:02 +02:00
parent 734f9db4ba
commit 781ea4f7b5
1 changed files with 2 additions and 3 deletions
@@ -103,10 +103,9 @@
    enable = true;
    ports = [ 22 ];
    settings = {
-      PasswordAuthentication = true;
+      PasswordAuthentication = false;
      KbdInteractiveAuthentication = false;
-      # AllowUsers = [ "backup" ];
-      # UseDns = true;
+      AuthenticationMethods = "publickey";
      X11Forwarding = false;
      PermitRootLogin = "no";
    };