From f762ec14cd1af759e3ed2ce360e8a6f2752e6779 Mon Sep 17 00:00:00 2001
From: Tristan Druyen <tristan@vault81.de>
Date: Sat, 4 Nov 2023 01:17:25 +0100
Subject: [PATCH] Disable ssh password auth

---
 os-mods/common/default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/os-mods/common/default.nix b/os-mods/common/default.nix
index 1a0d3be..1014c3f 100644
--- a/os-mods/common/default.nix
+++ b/os-mods/common/default.nix
@@ -75,7 +75,11 @@
 
     envfs.enable = true;
 
-    openssh.enable = true;
+    openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+      settings.KbdInteractiveAuthentication = false;
+    };
 
     gvfs.enable = true;
     avahi.enable = true;