nixosMod/sshAuthorize: fix set PermitRootLogin

2 months ago · ebd3ceade9
parent 31852caec4
commit ebd3ceade9
1 changed files with 2 additions and 1 deletions
--- a/nix/nixos-modules/improvedDefaults/sshAuthorize.nix
+++ b/nix/nixos-modules/improvedDefaults/sshAuthorize.nix
@ -57,7 +57,8 @@ in
        in
        {

-          services.openssh.settings.PermitRootLogin = if isRootAuthed then true else lib.mkDefault false;
+          services.openssh.settings.PermitRootLogin =
+            if isRootAuthed then "prohibit-password" else lib.mkDefault "no";

          users.users.root.openssh.authorizedKeys.keys = lib.mkIf doRootAuth (
            lib.mkDefault myOpts.sshPublicKeys