no interactive auth for gitea

2025-08-16 12:19:31 -05:00
parent 884a3f87eb
commit e33b53e459
1 changed files with 8 additions and 1 deletions
--- a/system-config/services/containers/gitea/default.nix
+++ b/system-config/services/containers/gitea/default.nix
@@ -104,7 +104,14 @@
                    };

                };
-                services.openssh.enable = true;
+                services.openssh = {
+                    enable = true;
+                    settings = {
+                        PermitRootLogin = lib.mkForce "no";
+                        PasswordAuthentication = false;
+                        KbdInteractiveAuthentication = false;
+                    };
+                };

                networking.firewall.allowedTCPPorts = [ 22 3000 ];