set root password

This commit is contained in:
Ingolf Wagner 2024-07-04 19:22:20 +02:00
parent 1dd9135402
commit 8052c8f411
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B

View file

@ -43,8 +43,10 @@ in
efiSupport = false; # we created a ef02 partition because uefi is not supported on hetzner online machines.
};
# Initial empty root password for easy login:
users.users.root.initialHashedPassword = "";
# root password
clan.core.facts.services.rootPassword = factsGenerator.password { name = "root"; };
users.users.root.hashedPasswordFile = config.clan.core.facts.services.rootPassword.secret."password.root.pam".path;
services.openssh.settings.PermitRootLogin = "prohibit-password";
services.openssh.settings.PasswordAuthentication = false;