From 6cfa82efc9ddc2f344e20b8c3bfda4b6410238e6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Maciej=20Kr=C3=BCger?= <mkrueger@mgit.at>
Date: Sun, 24 Mar 2024 18:55:56 +0100
Subject: [PATCH] base: add note about leaving UsePAM on

---
 modules/defaults/base/sshd.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/defaults/base/sshd.nix b/modules/defaults/base/sshd.nix
index 1242a54..3389414 100644
--- a/modules/defaults/base/sshd.nix
+++ b/modules/defaults/base/sshd.nix
@@ -11,7 +11,8 @@ with lib;
       HostbasedAuthentication = false;
       PermitEmptyPasswords = false;
       UseDns = false;
-      UsePAM = mkDefault true;
+      # disabling this breaks ssh login under nixos
+      UsePAM = true;
     };
 
     # https://gitlab.com/gitlab-org/gitlab-foss/-/blob/master/doc/user/gitlab_com/index.md#ssh-host-keys-fingerprints