examples/configuration.nix: disable `passwordAuthentication`

This is a sensible default.

Also clarify the pubkey setup.
This commit is contained in:
Erik Arvstedt 2022-02-03 20:46:31 +01:00
parent e093bb64d9
commit 7402212263
No known key found for this signature in database
GPG Key ID: 33312B944DD97846
1 changed files with 8 additions and 3 deletions

View File

@ -234,10 +234,15 @@
networking.hostName = "host";
time.timeZone = "UTC";
# FIXME: Add your SSH pubkey
services.openssh.enable = true;
services.openssh = {
enable = true;
passwordAuthentication = false;
};
users.users.root = {
openssh.authorizedKeys.keys = [ "" ];
openssh.authorizedKeys.keys = [
# FIXME: Replace this with your SSH pubkey
"ssh-ed25519 AAAAC3..."
];
};
# FIXME: Uncomment this to allow the operator user to run