flake/nixos/security/security.nix
2023-09-19 08:17:43 +08:00

15 lines
239 B
Nix
Executable file

{ ... }:
{
security = {
apparmor.enable = true;
sudo.execWheelOnly = true;
};
boot.loader.systemd-boot.editor = false;
services.openssh.settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
};
}