fix(ssh): harden ARM SD installer image SSH

2026-03-11 21:25:32 +01:00
1 parent d58c4fee0d
commit 58642c9e15
@@ -37,7 +37,10 @@ in

  security.sudo.wheelNeedsPassword = false;

-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    harden = true;
+  };

  # sdImage.postBuildCommands =
  #   let