examples/configuration.nix: disable passwordAuthentication

This is a sensible default.

Also clarify the pubkey setup.
This commit is contained in:
Erik Arvstedt 2022-02-03 20:46:31 +01:00
parent e093bb64d9
commit 7402212263
No known key found for this signature in database
GPG Key ID: 33312B944DD97846

View File

@ -234,10 +234,15 @@
networking.hostName = "host"; networking.hostName = "host";
time.timeZone = "UTC"; time.timeZone = "UTC";
# FIXME: Add your SSH pubkey services.openssh = {
services.openssh.enable = true; enable = true;
passwordAuthentication = false;
};
users.users.root = { users.users.root = {
openssh.authorizedKeys.keys = [ "" ]; openssh.authorizedKeys.keys = [
# FIXME: Replace this with your SSH pubkey
"ssh-ed25519 AAAAC3..."
];
}; };
# FIXME: Uncomment this to allow the operator user to run # FIXME: Uncomment this to allow the operator user to run