From 2d801ae06a12b83fb9a33bc31baf3324d754c7a1 Mon Sep 17 00:00:00 2001
From: Toast <toast003@tutamail.com>
Date: Sun, 14 Dec 2025 02:16:23 +0100
Subject: [PATCH] Server/ssh: only allow toast user

---
 roles/server/ssh.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/server/ssh.nix b/roles/server/ssh.nix
index 66e163d..33694c3 100755
--- a/roles/server/ssh.nix
+++ b/roles/server/ssh.nix
@@ -48,6 +48,7 @@ in {
       UseDns = true;
       PermitRootLogin = "no";
       PasswordAuthentication = false;
+      AllowUsers = ["toast"];
     };
     # The forgejo module is fucky so I can't set this with the nixos option
     # https://github.com/NixOS/nixpkgs/issues/306205