Disable password login via SSH in apex

Reviewed-by: Aleix Boné <abonerib@bsc.es>
Enable fail2ban in apex login node
2026-01-07 13:14:30 +01:00 · 2026-01-07 13:14:22 +01:00
2 changed files with 5 additions and 3 deletions
--- a/m/apex/configuration.nix
+++ b/m/apex/configuration.nix
@@ -57,6 +57,11 @@
    };
  };

+  services.fail2ban.enable = true;
+
+  # Disable SSH login with password, allow only keypair
+  services.openssh.settings.PasswordAuthentication = false;
+
  networking.firewall = {
    extraCommands = ''
      # Blackhole BSC vulnerability scanner (OpenVAS) as it is spamming our
--- a/pkgs/llvm-ompss2/clang.nix
+++ b/pkgs/llvm-ompss2/clang.nix
@@ -17,7 +17,6 @@
 , gitUrl ? "ssh://git@bscpm04.bsc.es/llvm-ompss/llvm-mono.git"
 , gitBranch ? "master"
 , gitCommit ? "872ba63f86edaefc9787984ef3fae9f2f94e0124" # github-release-2025.11
-, buildLlvmPackages
 }:

 let
@@ -120,8 +119,6 @@ in stdenv.mkDerivation {
      "-DCMAKE_INSTALL_RPATH=${zlib}/lib:${gcc.cc.lib}/lib"
      "-DLLVM_APPEND_VC_REV=ON"
      "-DLLVM_FORCE_VC_REVISION=${source.version}"
-      "-DLLVM_TABLEGEN_EXE=${buildLlvmPackages.tblgen}/bin/llvm-tblgen"
-      "-DCLANG_TABLEGEN=${buildLlvmPackages.tblgen}/bin/clang-tblgen"
    )
  '';