From fc785fa6dde1f4bc25919eb828feefb10701c66d Mon Sep 17 00:00:00 2001
From: rndusr <ryan@beepboop.systems>
Date: Wed, 19 Jun 2024 01:03:51 -0500
Subject: [PATCH] make ssh pubkey auth required

---
 boxes/netbox/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/boxes/netbox/default.nix b/boxes/netbox/default.nix
index d67be89..479b9c5 100644
--- a/boxes/netbox/default.nix
+++ b/boxes/netbox/default.nix
@@ -144,6 +144,11 @@
   services.openssh = {
     enable = true;
     ports = [55555];
+    settings = {
+      X11Forwarding = false;
+      PermitRootLogin = "no";
+      PasswordAuthentication = false;
+    };
   };
 
   services.vaultwarden.enable = true;