From e49bbb0b53e80d0a0450b9dbe5e833570ae98109 Mon Sep 17 00:00:00 2001
From: Craige McWhirter <craige.mcwhirter@iohk.io>
Date: Thu, 17 Sep 2020 11:15:10 +1000
Subject: [PATCH] Switched to prohibit-password

---
 roles/openssh.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/openssh.nix b/roles/openssh.nix
index 9d214fb..78a25a2 100644
--- a/roles/openssh.nix
+++ b/roles/openssh.nix
@@ -6,7 +6,7 @@
 
   services.openssh = {
     enable = true;          # Enable the OpenSSH daemon.
-    permitRootLogin = "without-password";
+    permitRootLogin = "prohibit-password";
     challengeResponseAuthentication = false;
     passwordAuthentication = false;
     openFirewall = true;