Harden SSH

This commit is contained in:
Timothy 2022-08-14 15:38:36 +08:00
parent 9bd44a4bba
commit 5511b8b30a
Signed by: tec
SSH key fingerprint: SHA256:eobz41Mnm0/iYWBvWThftS0ElEs1ftBr6jamutnXc/A

View file

@ -2,7 +2,12 @@
{
time.timeZone = "UTC";
services.openssh = { enable = true; };
services.openssh = {
enable = true;
# require public key authentication for better security
passwordAuthentication = false;
kbdInteractiveAuthentication = false;
};
system.stateVersion = "22.05";
nix = {