From adf6f742000f6b619ae319bf7e9428f08cb499ee Mon Sep 17 00:00:00 2001
From: Lillian-Violet <git@lillianviolet.dev>
Date: Wed, 19 Nov 2025 20:27:32 +0100
Subject: [PATCH] enable ssh for shodan

---
 nixos/hosts/shodan/configuration.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/nixos/hosts/shodan/configuration.nix b/nixos/hosts/shodan/configuration.nix
index 99c9655..09a242f 100644
--- a/nixos/hosts/shodan/configuration.nix
+++ b/nixos/hosts/shodan/configuration.nix
@@ -78,6 +78,15 @@
 
   xdg.portal.extraPortals = [pkgs.kdePackages.xdg-desktop-portal-kde];
   services = {
+    openssh = {
+      enable = true;
+      settings = {
+        # require public key authentication for better security
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+        PermitRootLogin = "no";
+      };
+    };
     displayManager = {
       # defaultSession = "plasma";
       sddm.wayland.enable = lib.mkForce true;