fix(ssh): enforce SSH public key authentication only in depth

2026-07-12 13:43:17 +02:00
parent beb894e97c
commit da72da34a1
1 changed files with 1 additions and 0 deletions
@@ -20,6 +20,7 @@ in
    services.openssh.settings = optionalAttrs cfg.harden {
      PermitRootLogin = "no";
      PasswordAuthentication = false;
+      AuthenticationMethods = "publickey";
      KbdInteractiveAuthentication = false;
      ChallengeResponseAuthentication = false;
      X11Forwarding = false;