2 files changed, 7 insertions, 6 deletions
diff --git a/modules/network/default.nix b/modules/network/default.nix
index 444f53c..6a3ab69 100644
--- a/modules/network/default.nix
+++ b/modules/network/default.nix
@@ -7,9 +7,7 @@ in {
   networking = {
     hostName = "bacchus";
 
-    firewall = {
-      enable = true;
-    };
+    firewall.enable = true;
 
     networkmanager = {
       enable = true;
diff --git a/modules/network/ssh.nix b/modules/network/ssh.nix
index e4e5b2a..573bdf4 100644
--- a/modules/network/ssh.nix
+++ b/modules/network/ssh.nix
@@ -5,7 +5,10 @@ in {
   services.sshd.enable = true;
 
   # Auth
-  # TODO: dont allow via password
-  # openssh.authorizedKeys.keys = private.ssh.authorizedKeys;
-  services.openssh.settings.PermitRootLogin = "yes"; 
+  users.users.bacchus.openssh.authorizedKeys.keys = private.ssh.authorizedKeys;
+  services.openssh.settings = {
+    PermitRootLogin = "no";
+    PasswordAuthentication = false;
+    ChallengeResponseAuthentication = false;
+  };
 }