fix

modules/core/ssh.nix

@@ -3,10 +3,16 @@
   imports = [ inputs.auth-keys-hub.nixosModules.auth-keys-hub ];
 
   programs.ssh.startAgent = true;
-  
+
   services.openssh = {
     enable = true;
     openFirewall = true;
+    settings = {
+      PermitRootLogin = "no"; # Prevent root from SSH login
+      PasswordAuthentication = false;
+      KbdInteractiveAuthentication = true;
+    };
+    ports = [ 22 ];
   };
 
   programs.auth-keys-hub = {