From 6f1a7697b9b867dee3fc05a6235ef0d31262bebe Mon Sep 17 00:00:00 2001
From: Noah Metz <noah@metznet.ca>
Date: Sun, 3 Dec 2023 13:59:48 -0700
Subject: [PATCH] Disabled password authentication by default

---
 metznet/system/base-system.scm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/metznet/system/base-system.scm b/metznet/system/base-system.scm
index 84d5ff6..bb674a2 100644
--- a/metznet/system/base-system.scm
+++ b/metznet/system/base-system.scm
@@ -251,7 +251,8 @@
 
 (define %metznet-services
   (list (service openssh-service-type
-                 (openssh-configuration (extra-content
+                 (openssh-configuration (password-authentication? #f)
+                                        (extra-content
                                          "KerberosAuthentication yes")))
         (service krb5-service-type %metznet-krb5-config)
         (service pam-krb5-service-type