feature(ssh): add more security to the ssh config

2026-02-21 18:04:47 +01:00
parent 159cd6f2f2
commit aea7ba5c97
1 changed files with 10 additions and 0 deletions
--- a/modules/nixos/openssh.nix
+++ b/modules/nixos/openssh.nix
@@ -5,5 +5,15 @@
  services.openssh = {
    enable = true;
    openFirewall = true;
+    ports = [ 666 ];
+
+    settings = {
+      AuthenticationMethods = "publickey";
+      KbdInteractiveAuthentication = false;
+      MaxAuthTries = 5;
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+      X11Forwarding = false;
+    };
  };
 }