permit root login

2025-12-21 22:00:08 +03:00 · 2025-12-21 22:00:08 +03:00 · 4fc9253fad
commit 4fc9253fad
parent 28d6686fb3
1 changed files with 4 additions and 0 deletions
--- a/modules/nixos/services/backup-server.nix
+++ b/modules/nixos/services/backup-server.nix
@ -22,6 +22,10 @@ in
        ;
    };

+    # Allow root SSH login for backup clients to pull data
+    # Note: Configure root's authorized keys via users.users.root.openssh.authorizedKeys.keys
+    services.openssh.settings.PermitRootLogin = lib.mkForce "prohibit-password";
+
    # Ensure SSH is enabled for backup access
    assertions = [
      {