From e5b58133c49d7c99f96de9f2354cd3f10ecbbf60 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Sat, 24 Jan 2026 18:30:10 -0600
Subject: more ssh config

---
 modules/services/nixos/ssh.nix | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

(limited to 'modules/services/nixos/ssh.nix')

diff --git a/modules/services/nixos/ssh.nix b/modules/services/nixos/ssh.nix
index 76b0d87..23f8fc5 100644
--- a/modules/services/nixos/ssh.nix
+++ b/modules/services/nixos/ssh.nix
@@ -73,13 +73,10 @@ in {
       |> (builtins.filter (x: x != null));
 
     users.users."root".openssh.authorizedKeys.keys =
-      if config.services.openssh.settings.PermitRootLogin == "prohibit-password"
-      then
-        hosts
-        |> (builtins.mapAttrs (_: data: data.user_pubkey or null))
-        |> builtins.attrValues
-        |> (builtins.filter (x: x != null))
-      else {};
+      hosts
+      |> (builtins.mapAttrs (_: data: data.user_pubkey or null))
+      |> builtins.attrValues
+      |> (builtins.filter (x: x != null)); # only possible over home network (:2222)
 
     systemd.services."openssh" = lib.mkIf config.collinux.services.networking.networkd.enable {
       after = lib.mkAfter ["network-online.target"];
-- 
cgit v1.3.1