From 38ccadbc876ab9ae4f27d3e84a31f57bee10af3b Mon Sep 17 00:00:00 2001
From: Akshay Nair <phenax5@gmail.com>
Date: Sun, 8 Jun 2025 21:05:21 +0530
Subject: Switch to ssh key

---
 modules/network/default.nix | 4 +---
 modules/network/ssh.nix     | 9 ++++++---
 2 files changed, 7 insertions(+), 6 deletions(-)

(limited to 'modules/network')

diff --git a/modules/network/default.nix b/modules/network/default.nix
index 444f53c..6a3ab69 100644
--- a/modules/network/default.nix
+++ b/modules/network/default.nix
@@ -7,9 +7,7 @@ in {
   networking = {
     hostName = "bacchus";
 
-    firewall = {
-      enable = true;
-    };
+    firewall.enable = true;
 
     networkmanager = {
       enable = true;
diff --git a/modules/network/ssh.nix b/modules/network/ssh.nix
index e4e5b2a..573bdf4 100644
--- a/modules/network/ssh.nix
+++ b/modules/network/ssh.nix
@@ -5,7 +5,10 @@ in {
   services.sshd.enable = true;
 
   # Auth
-  # TODO: dont allow via password
-  # openssh.authorizedKeys.keys = private.ssh.authorizedKeys;
-  services.openssh.settings.PermitRootLogin = "yes"; 
+  users.users.bacchus.openssh.authorizedKeys.keys = private.ssh.authorizedKeys;
+  services.openssh.settings = {
+    PermitRootLogin = "no";
+    PasswordAuthentication = false;
+    ChallengeResponseAuthentication = false;
+  };
 }
-- 
cgit v1.3.1