From 57432afd013928434d1b363b2ce8490956cf3a4b Mon Sep 17 00:00:00 2001
From: Alexander Heldt <me@alexanderheldt.se>
Date: Tue, 31 Oct 2023 21:39:47 +0100
Subject: [PATCH] sombrero: Disable password login for `ssh`

---
 hosts/sombrero/modules/ssh/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hosts/sombrero/modules/ssh/default.nix b/hosts/sombrero/modules/ssh/default.nix
index d5a53ec..0d0ac95 100644
--- a/hosts/sombrero/modules/ssh/default.nix
+++ b/hosts/sombrero/modules/ssh/default.nix
@@ -45,6 +45,11 @@ in
           type = "ed25519";
         }];
 
+        settings = {
+          PasswordAuthentication = false;
+          KbdInteractiveAuthentication = false;
+        };
+
         authorizedKeysCommand = "/etc/ssh/authorized_keys_command";
         authorizedKeysCommandUser = "root";
       };