openssh: support prohibit-password for permitRootLogin

See https://github.com/openssh/openssh-portable/commit/1dc8d93ce69d6565747eb44446ed117187621b26 I also made it the default.
2016-10-01 13:23:56 -04:00
parent 98a8146428
commit 6891bb1c59
6 changed files with 7 additions and 7 deletions
@@ -138,7 +138,7 @@ let cfg = config.ec2; in
    # Allow root logins only using the SSH key that the user specified
    # at instance creation time.
    services.openssh.enable = true;
-    services.openssh.permitRootLogin = "without-password";
+    services.openssh.permitRootLogin = "prohibit-password";

    # Force getting the hostname from EC2.
    networking.hostName = mkDefault "";