Add readonly user

1 files changed, 6 insertions, 0 deletions

diff --git a/machines/dragon.nix b/machines/dragon.nix
index d6b72ec..0fa5559 100644
--- a/machines/dragon.nix
+++ b/machines/dragon.nix
@@ -139,10 +139,16 @@ in
   # XXX: temorary hack because of an accidental upgrade.
   systemd.services.lxd.serviceConfig.ExecStart = lib.mkForce "@${pkgs.lxd.bin}/bin/lxd lxd --group lxd";
 
+  # Required to enable password authentication for one user.
+  security.pam.services.sshd.unixAuth = lib.mkForce true;
   services = {
     openssh = {
       enable = lib.mkDefault true;
       passwordAuthentication = false;
+      extraConfig = ''
+        Match User readonly
+	PasswordAuthentication yes
+      '';
     };
   };