···

       
12
       
12
       
 
       
disabled entirely by setting

     

       
13
       
13
       
 
       
[](#opt-services.openssh.settings.PermitRootLogin) to `"no"`.

     

       
14
       
14
       
 
       


     

       
15
       
15
       
-
       
You can declaratively specify authorised RSA/DSA public keys for a user

     

       
15
       
15
       
+
       
You can declaratively specify authorised public keys for a user

     

       
16
       
16
       
 
       
as follows:

     

       
17
       
17
       
 
       


     

       
18
       
18
       
 
       
```nix

     

       
19
       
19
       
 
       
{

     

       
20
       
20
       
 
       
  users.users.alice.openssh.authorizedKeys.keys =

     

       
21
       
21
       
-
       
    [ "ssh-dss AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ];

     

       
21
       
21
       
+
       
    [ "ssh-ed25519 AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ];

     

       
22
       
22
       
 
       
}

     

       
23
       
23
       
 
       
```