satr14/nix-flake
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

disable root password auth
Some checks are pending
NixOS Rebuild / rebuild (push) Waiting to run
Details

Browse source
This commit is contained in:
Satria 2026-03-15 10:33:25 +07:00
commit 4d9b826d39
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.forgejo/workflows/activate.yml
View file

@ -21,6 +21,7 @@ jobs:
- name: Rebuild - name: Rebuild
run: | run: |
ssh -i ./ssh/deploy_key \ ssh -i ./ssh/deploy_key \
-o PasswordAuthentication=no \
-o StrictHostKeyChecking=no \ -o StrictHostKeyChecking=no \
-o UserKnownHostsFile=/dev/null \ -o UserKnownHostsFile=/dev/null \
root@localhost \ root@localhost \
@ -30,6 +31,7 @@ jobs:
if: always() if: always()
run: | run: |
ssh -i ./ssh/deploy_key \ ssh -i ./ssh/deploy_key \
-o PasswordAuthentication=no \
-o StrictHostKeyChecking=no \ -o StrictHostKeyChecking=no \
-o UserKnownHostsFile=/dev/null \ -o UserKnownHostsFile=/dev/null \
root@localhost "bash -lc 'nixos-version'" root@localhost "bash -lc 'nixos-version'"

2
hosts/bootstrap/config.nix
View file

@ -21,7 +21,7 @@
tailscale.enable = true; tailscale.enable = true;
openssh = { openssh = {
enable = true; enable = true;
settings.PermitRootLogin = "yes"; settings.PermitRootLogin = "prohibit-password";
}; };
}; };
users.users."${username}" = { users.users."${username}" = {