From 68de0136c965c6549e39f7ca6d83be9f781aca6a Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Tue, 28 May 2024 10:19:07 +0200
Subject: nanopi: disable SSH logins with passwords

---
 system/nanopi.nix | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'system/nanopi.nix')

diff --git a/system/nanopi.nix b/system/nanopi.nix
index 1fe720d7..4c91c787 100755
--- a/system/nanopi.nix
+++ b/system/nanopi.nix
@@ -200,6 +200,10 @@ in
     enable = true;
     openFirewall = true;
     startWhenNeeded = false;
+    settings = {
+      PasswordAuthentication = false;
+      KbdInteractiveAuthentication = false;
+    };
   };
   programs.mosh.enable = true;
   services.sshguard = {
-- 
cgit 1.4.1