Restrict root login to key only

modules/utils/lxc-standard.nix

@@ -12,6 +12,8 @@ in
     # Enable SSH
     services = {
       openssh.enable = true;
+      # Disable password root access. Necessary for Colmena
+      openssh.permitRootLogin = "prohibit-password";
     };
 
     my.utils.serverNodeUsers.enable = true;