From cbe7b1204d0a2ec9897e6856255967c0e15e74e5 Mon Sep 17 00:00:00 2001
From: lightly-toasted <tooast@duck.com>
Date: Thu, 25 Sep 2025 15:09:47 +0900
Subject: [PATCH] feat(vps): disable password and root login

---
 hosts/vps/modules/services/openssh.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/hosts/vps/modules/services/openssh.nix b/hosts/vps/modules/services/openssh.nix
index 8f0456f..feaa722 100644
--- a/hosts/vps/modules/services/openssh.nix
+++ b/hosts/vps/modules/services/openssh.nix
@@ -1,3 +1,9 @@
 {
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+    };
+  };
 }