Disable password login via SSH in apex

2025-11-20 15:21:14 +01:00 · 2025-11-20 15:21:14 +01:00 · 341551d5ba
commit 341551d5ba
parent 2d2762d4ec
1 changed files with 3 additions and 0 deletions
--- a/m/apex/configuration.nix
+++ b/m/apex/configuration.nix
@ -59,6 +59,9 @@

  services.fail2ban.enable = true;

+  # Disable SSH login with password, allow only keypair
+  services.openssh.settings.PasswordAuthentication = false;
+
  networking.firewall = {
    extraCommands = ''
      # Blackhole BSC vulnerability scanner (OpenVAS) as it is spamming our