1# Secure Shell Access {#sec-ssh} 2 3Secure shell (SSH) access to your machine can be enabled by setting: 4 5```nix 6services.openssh.enable = true; 7``` 8 9By default, root logins using a password are disallowed. They can be 10disabled entirely by setting 11[](#opt-services.openssh.settings.PermitRootLogin) to `"no"`. 12 13You can declaratively specify authorised RSA/DSA public keys for a user 14as follows: 15 16```nix 17users.users.alice.openssh.authorizedKeys.keys = 18 [ "ssh-dss AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ]; 19```