add ssh hardening module

This commit is contained in:
Sangmin Kim 2026-05-19 13:35:07 +09:00
parent 7261dc42c3
commit 0312eac789

View file

@ -1 +1,13 @@
# TODO: Define OpenSSH settings. { ... }:
{
services.openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
KbdInteractiveAuthentication = false;
PermitRootLogin = "no";
};
};
}