From 2aa2a41617b2210a323c20f6c60e21942d67046a Mon Sep 17 00:00:00 2001
From: pazpi <davide@pasetto.me>
Date: Fri, 21 Feb 2025 17:45:46 +0100
Subject: [PATCH] Restrict root login to key only

---
 modules/utils/lxc-standard.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/utils/lxc-standard.nix b/modules/utils/lxc-standard.nix
index 9df7302..4351539 100644
--- a/modules/utils/lxc-standard.nix
+++ b/modules/utils/lxc-standard.nix
@@ -12,6 +12,8 @@ in
     # Enable SSH
     services = {
       openssh.enable = true;
+      # Disable password root access. Necessary for Colmena
+      openssh.permitRootLogin = "prohibit-password";
     };
 
     my.utils.serverNodeUsers.enable = true;