disable all but public key auth for ssh

configuration.nix

@@ -103,10 +103,9 @@
     enable = true;
     ports = [ 22 ];
     settings = {
-      PasswordAuthentication = true;
+      PasswordAuthentication = false;
       KbdInteractiveAuthentication = false;
-      # AllowUsers = [ "backup" ];
-      # UseDns = true;
+      AuthenticationMethods = "publickey";
       X11Forwarding = false;
       PermitRootLogin = "no";
     };

flake.nix

@@ -36,7 +36,7 @@
           ./backup-target.nix
 
 	      ./users/shatteredmint.nix
-          # ./qemu-bridges.nix
+          ./qemu-bridges.nix
 	];
       };
 

qemu-bridges.nix

@@ -8,6 +8,7 @@
 
     networking.interfaces.virtbr0 = {
         useDHCP = true;
+        macAddress = "04:92:26:c3:06:c2";
     };
 
     virtualisation.libvirtd = { 

software/wireguard-client.nix

@@ -8,7 +8,7 @@
         wg-quick = {
             # enable = true;
             interfaces.wg0 = {
-                adress = [ ("192.168.87." + builtins.toString(ip) + "/32")];
+                address = [ ("192.168.87." + builtins.toString(ip) + "/32")];
                 listenPort = 56878;
                 privateKeyFile = "/root/wg.keys";
                 dns = [ "192.168.178.108" ];