openssh: support prohibit-password for permitRootLogin

See https://github.com/openssh/openssh-portable/commit/1dc8d93ce69d6565747eb44446ed117187621b26

I also made it the default.
This commit is contained in:
Anmol Sethi
2016-10-01 13:23:56 -04:00
parent 98a8146428
commit 6891bb1c59
6 changed files with 7 additions and 7 deletions
@@ -111,7 +111,7 @@ in
# Allow root logins only using the SSH key that the user specified
# at instance creation time.
services.openssh.enable = true;
services.openssh.permitRootLogin = "without-password";
services.openssh.permitRootLogin = "prohibit-password";
services.openssh.passwordAuthentication = mkDefault false;
# Force getting the hostname from Google Compute.