1<section xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" xml:id="sec-ssh">
2 <title>Secure Shell Access</title>
3 <para>
4 Secure shell (SSH) access to your machine can be enabled by setting:
5 </para>
6 <programlisting language="bash">
7services.openssh.enable = true;
8</programlisting>
9 <para>
10 By default, root logins using a password are disallowed. They can be
11 disabled entirely by setting
12 <xref linkend="opt-services.openssh.permitRootLogin" /> to
13 <literal>"no"</literal>.
14 </para>
15 <para>
16 You can declaratively specify authorised RSA/DSA public keys for a
17 user as follows:
18 </para>
19 <programlisting language="bash">
20users.users.alice.openssh.authorizedKeys.keys =
21 [ "ssh-dss AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ];
22</programlisting>
23</section>