fix(security): enable sudo password for ryan, use root for remote deployment

2026-02-22 07:57:41 +01:00 · 2024-03-04 18:36:59 +08:00
parent 2072da67a5
commit 2c8d0f629c
1 changed files with 2 additions and 1 deletions
--- a/modules/nixos/base/ssh.nix
+++ b/modules/nixos/base/ssh.nix
@@ -15,7 +15,8 @@
    enable = true;
    settings = {
      X11Forwarding = true;
-      PermitRootLogin = "no"; # disable root login
+      # root user is used for remote deployment, so we need to allow it
+      PermitRootLogin = "prohibit-password";
      PasswordAuthentication = false; # disable password login
    };
    openFirewall = true;