fix(ssh): harden ARM SD installer image SSH

2026-02-01 22:57:04 +01:00
parent d58c4fee0d
commit 58642c9e15
1 changed files with 4 additions and 1 deletions
--- a/images/sd-image-aarch64.nix
+++ b/images/sd-image-aarch64.nix
@@ -37,7 +37,10 @@ in

  security.sudo.wheelNeedsPassword = false;

-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    harden = true;
+  };

  # sdImage.postBuildCommands =
  #   let