From 187b9ffe974c429205f48e08b057385708d075fe Mon Sep 17 00:00:00 2001
From: Dmitry Voronin <account@voronind.com>
Date: Sat, 9 Mar 2024 19:35:05 +0300
Subject: [PATCH] Sshd : Enable key auth.

---
 module/common/Sshd.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/module/common/Sshd.nix b/module/common/Sshd.nix
index 8a52ad94..fdab5afd 100644
--- a/module/common/Sshd.nix
+++ b/module/common/Sshd.nix
@@ -9,12 +9,12 @@
 				port = 22143;
 			}
 		];
-		settings = {
+		settings = { # TODO: Migrate from passwords.
 			AllowUsers      = [ "root" ];
 			LoginGraceTime  = "1m";
-			MaxAuthTries    = 1;
+			MaxAuthTries    = 4;
 			MaxSessions     = 10;
-			PermitRootLogin = "yes";
+			PermitRootLogin = "yes"; # TODO: Make `prohibit-password`.
 			StrictModes     = false;
 
 			UseDns = false;
@@ -26,7 +26,7 @@
 			KerberosAuthentication       = false;
 			PasswordAuthentication       = true;
 			PermitEmptyPasswords         = false;
-			PubkeyAuthentication         = false;
+			PubkeyAuthentication         = true;
 		};
 	};
 }