From 10a64fa65bbd09dcde6b66626b3a8657a16f7fa8 Mon Sep 17 00:00:00 2001
From: noa <noa.aarts@dstny.nl>
Date: Sat, 6 Jul 2024 09:54:51 +0200
Subject: [PATCH] feat: disable password login, add laptop ssh key

---
 hosts/server/configuration.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/hosts/server/configuration.nix b/hosts/server/configuration.nix
index 08c4843..fd69b26 100644
--- a/hosts/server/configuration.nix
+++ b/hosts/server/configuration.nix
@@ -52,6 +52,7 @@
     root = {
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINWtje7dGqyrBY7PLq6DANvUR6yfungQNsXGkTO6PP6/ noa@NoasPCArch"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFemc4Pzp7I0y8FHxgRO/c/ReBmXuqXR6CWqbhiQ+0t noa@Noas_flaptop"
       ];
     };
     noa = {
@@ -59,6 +60,7 @@
       extraGroups = [ "networkmanager" "wheel" "docker" ];
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINWtje7dGqyrBY7PLq6DANvUR6yfungQNsXGkTO6PP6/ noa@NoasPCArch"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFemc4Pzp7I0y8FHxgRO/c/ReBmXuqXR6CWqbhiQ+0t noa@Noas_flaptop"
       ];
       hashedPassword = "$6$rounds=512400$g/s4dcRttXi4ux6c$Z6pKnhJXcWxv0TBSMtvJu5.piETdUBSgBVN7oDPKiQV.lbTYz1r.0XQLwMYxzcvaaX0DL6Iw/SEUTiC2M50wC/";
     };
@@ -85,6 +87,8 @@
 
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
+  services.openssh.settings.passwordAuthentication = false;
+  services.openssh.settings.KbdInteractiveAuthentication = false;
   programs.zsh.enable = true;
 
   home-manager = {