From 36a8868f94b7815d2d0e10aadc7452b1ce1df083 Mon Sep 17 00:00:00 2001
From: Peder Bergebakken Sundt <pbsds@hotmail.com>
Date: Sun, 11 Aug 2024 03:31:04 +0200
Subject: [PATCH] users: disable password login for users in @wheel

---
 base.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/base.nix b/base.nix
index 092cce2..27b8522 100644
--- a/base.nix
+++ b/base.nix
@@ -80,6 +80,9 @@
     enable = true;
     extraConfig = ''
       PubkeyAcceptedAlgorithms=+ssh-rsa
+      Match Group wheel
+        PasswordAuthentication no
+      Match All
     '';
     settings.PermitRootLogin = "yes";
   };