From b0d668d91c5f658ee9cd1ccd505d278ef4195687 Mon Sep 17 00:00:00 2001
From: TheWanderingCrow <contact@wanderingcrow.net>
Date: Thu, 4 Sep 2025 09:31:10 -0400
Subject: [PATCH] ssh settings

---
 hosts/common/core/ssh.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/common/core/ssh.nix b/hosts/common/core/ssh.nix
index 6a770c6..18afcec 100644
--- a/hosts/common/core/ssh.nix
+++ b/hosts/common/core/ssh.nix
@@ -27,6 +27,9 @@
     settings = {
       PermitRootLogin = "no";
       PasswordAuthentication = false;
+      KbdInteractiveAuthentication = false;
     };
   };
+
+  services.fail2ban.enable = lib.mkDefault true; # This comes with an SSH jail preconfigured, expanded fail2ban can be found in modules/services
 }