1 files changed, 6 insertions, 3 deletions
diff --git a/modules/network/ssh.nix b/modules/network/ssh.nix
index e4e5b2a..573bdf4 100644
--- a/modules/network/ssh.nix
+++ b/modules/network/ssh.nix
@@ -5,7 +5,10 @@ in {
   services.sshd.enable = true;
 
   # Auth
-  # TODO: dont allow via password
-  # openssh.authorizedKeys.keys = private.ssh.authorizedKeys;
-  services.openssh.settings.PermitRootLogin = "yes"; 
+  users.users.bacchus.openssh.authorizedKeys.keys = private.ssh.authorizedKeys;
+  services.openssh.settings = {
+    PermitRootLogin = "no";
+    PasswordAuthentication = false;
+    ChallengeResponseAuthentication = false;
+  };
 }