From 4bc15a5913d682d7e143a0276f904e5d59946d90 Mon Sep 17 00:00:00 2001
From: pazpi <davide@pasetto.me>
Date: Fri, 22 Aug 2025 18:13:46 +0200
Subject: [PATCH] Disable password login for user

---
 modules/utils/lxc-standard.nix | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/modules/utils/lxc-standard.nix b/modules/utils/lxc-standard.nix
index 3e53f02..a4f0384 100644
--- a/modules/utils/lxc-standard.nix
+++ b/modules/utils/lxc-standard.nix
@@ -10,10 +10,13 @@ in
   config = lib.mkIf cfg.enable {
 
     # Enable SSH
-    services = {
-      openssh.enable = true;
-      # Disable password root access. Necessary for Colmena
-      openssh.settings.PermitRootLogin = "prohibit-password";
+    services.openssh = {
+      enable = true;
+      settings = {
+        # Disable password root access. Necessary for Colmena
+        PermitRootLogin = "prohibit-password";
+        PasswordAuthentication = false;
+      };
     };
 
     my.utils.serverNodeUsers.enable = true;