harden openssh server

This commit is contained in:
Khaïs COLIN 2025-04-12 16:13:49 +02:00
parent c4a21a5a8d
commit e3ffce6b02
Signed by: logistic-bot
SSH key fingerprint: SHA256:3zI3/tx0ZpCLHCLPmEaGR4oeYCPMCzQxXhXutBmtOAU

View file

@ -237,7 +237,12 @@
}; };
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh.enable = true; services.openssh = {
enable = true;
ports = [2201];
settings.PasswordAuthentication = false;
settings.PermitRootLogin = "prohibit-password";
};
# enable manpages documentation # enable manpages documentation
documentation = { documentation = {