fix: further harden 'hardened-openssh' module

2026-03-11 21:25:22 +01:00
parent 3c294d2194
commit 7ccbbb418b
1 changed files with 1 additions and 0 deletions
@@ -10,6 +10,7 @@ in
    services.openssh.settings = optionalAttrs cfg.harden {
      PermitRootLogin = "no";
      PasswordAuthentication = false;
+      KbdInteractiveAuthentication = false;
      ChallengeResponseAuthentication = false;
      X11Forwarding = false;
      AllowAgentForwarding = false;