diff options
Diffstat (limited to 'machines')
| -rw-r--r-- | machines/dragon.nix | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/machines/dragon.nix b/machines/dragon.nix index d6b72ec..0fa5559 100644 --- a/machines/dragon.nix +++ b/machines/dragon.nix @@ -139,10 +139,16 @@ in # XXX: temorary hack because of an accidental upgrade. systemd.services.lxd.serviceConfig.ExecStart = lib.mkForce "@${pkgs.lxd.bin}/bin/lxd lxd --group lxd"; + # Required to enable password authentication for one user. + security.pam.services.sshd.unixAuth = lib.mkForce true; services = { openssh = { enable = lib.mkDefault true; passwordAuthentication = false; + extraConfig = '' + Match User readonly + PasswordAuthentication yes + ''; }; }; |