# Secure Shell Access

Secure shell (SSH) access to your machine can be enabled by setting:

    services.openssh.enable = true;

By default, root logins using a password are disallowed. They can be disabled entirely by setting `services.openssh.permitRootLogin` to `"no"`.

You can declaratively specify authorised RSA/DSA public keys for a user as follows:

    users.extraUsers.alice.openssh.authorizedKeys.keys =
      [ "ssh-dss AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ];