diff options
| author | Anmol Sethi <anmol@aubble.com> | 2016-10-01 13:23:56 -0400 |
|---|---|---|
| committer | Anmol Sethi <anmol@aubble.com> | 2016-10-01 13:23:56 -0400 |
| commit | 6891bb1c5930b1691dcd808d14d8b9404e480f7a (patch) | |
| tree | c3175409b0d26bea5a15bbcdc11b75f08d079ec0 /nixos/modules/virtualisation/google-compute-image.nix | |
| parent | 98a8146428b28354182dbe1eff78e3f540f565a6 (diff) | |
openssh: support prohibit-password for permitRootLogin
See https://github.com/openssh/openssh-portable/commit/1dc8d93ce69d6565747eb44446ed117187621b26
I also made it the default.
Diffstat (limited to 'nixos/modules/virtualisation/google-compute-image.nix')
| -rw-r--r-- | nixos/modules/virtualisation/google-compute-image.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/virtualisation/google-compute-image.nix b/nixos/modules/virtualisation/google-compute-image.nix index 489b612f1675..90dbd3b6d632 100644 --- a/nixos/modules/virtualisation/google-compute-image.nix +++ b/nixos/modules/virtualisation/google-compute-image.nix @@ -111,7 +111,7 @@ in # Allow root logins only using the SSH key that the user specified # at instance creation time. services.openssh.enable = true; - services.openssh.permitRootLogin = "without-password"; + services.openssh.permitRootLogin = "prohibit-password"; services.openssh.passwordAuthentication = mkDefault false; # Force getting the hostname from Google Compute. |