openssh: support prohibit-password for permitRootLogin

See https://github.com/openssh/openssh-portable/commit/1dc8d93ce69d6565747eb44446ed117187621b26 I also made it the default.
2016-10-01 13:23:56 -04:00
parent 98a8146428
commit 6891bb1c59
6 changed files with 7 additions and 7 deletions
@@ -102,8 +102,8 @@ in
      };

      permitRootLogin = mkOption {
-        default = "without-password";
-        type = types.enum ["yes" "without-password" "forced-commands-only" "no"];
+        default = "prohibit-password";
+        type = types.enum ["yes" "without-password" "prohibit-password" "forced-commands-only" "no"];
        description = ''
          Whether the root user can login using ssh.
        '';