1# Secure Shell Access {#sec-ssh} 2 3Secure shell (SSH) access to your machine can be enabled by setting: 4 5```nix 6{ 7 services.openssh.enable = true; 8} 9``` 10 11By default, root logins using a password are disallowed. They can be 12disabled entirely by setting 13[](#opt-services.openssh.settings.PermitRootLogin) to `"no"`. 14 15You can declaratively specify authorised public keys for a user 16as follows: 17 18```nix 19{ 20 users.users.alice.openssh.authorizedKeys.keys = 21 [ "ssh-ed25519 AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ]; 22} 23```