From 015131badeb841ba0f28de9956fc947e9d42f54d Mon Sep 17 00:00:00 2001
From: Syed Daanish <me@syedm.dev>
Date: Wed, 8 Jul 2026 20:26:41 +0100
Subject: [PATCH] Harden ssh

---
 hosts/syedm/default.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/hosts/syedm/default.nix b/hosts/syedm/default.nix
index 5c3d76e..3e7a883 100644
--- a/hosts/syedm/default.nix
+++ b/hosts/syedm/default.nix
@@ -12,7 +12,13 @@
 
   networking.hostName = "syedm";
 
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+    };
+  };
 
   services.caddy = {
     enable = true;