Disable password login via SSH in apex

Reviewed-by: Aleix Boné <abonerib@bsc.es>
Enable fail2ban in apex login node
2026-01-07 13:14:30 +01:00 · 2026-01-07 13:14:22 +01:00
1 changed files with 5 additions and 0 deletions
--- a/m/apex/configuration.nix
+++ b/m/apex/configuration.nix
@@ -57,6 +57,11 @@
    };
  };

+  services.fail2ban.enable = true;
+
+  # Disable SSH login with password, allow only keypair
+  services.openssh.settings.PasswordAuthentication = false;
+
  networking.firewall = {
    extraCommands = ''
      # Blackhole BSC vulnerability scanner (OpenVAS) as it is spamming our