|
1
|
{ |
|
2
|
# no priviledge escalation through sudo or polkit |
|
3
|
security.sudo.execWheelOnly = true; |
|
4
|
security.polkit.enable = false; |
|
5
|
|
|
6
|
# no password authentication |
|
7
|
services.openssh.settings = { |
|
8
|
KbdInteractiveAuthentication = false; |
|
9
|
PasswordAuthentication = false; |
|
10
|
}; |
|
11
|
} |