Disallow challenge-response-auth on ymir

1 files changed, 1 insertions, 0 deletions

diff --git a/ymir.nix b/ymir.nix
index ec8566ff..fbe45e03 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -189,6 +189,7 @@ in rec {
   services.openssh = {
     enable = true;
     passwordAuthentication = false;
+    challengeResponseAuthentication = false;
     extraConfig = ''
       AllowGroups ssh
     '';