we also disable password login

ah! there it is. sorry.

guess not only the password

what password? shouldn’t we all use ssh-keys by now?

do you use sudo with a password? this and the unknown username is what get as additional security then?

why no root login? how do you become root if you need it?

why don’t you want to open an ssh port? what’s wrong with that?

just disable password authentication, and maybe get fail2ban. am i missing something?

i used ansible some years ago and i’m using nixos currently and you can not compare those two.

i was not fluent in ansible and i’m not fluent in nixos. yes you have to leave your comfort zone for nixos, but your get so so much more.

the jinja templates in yaml feel like a big hack if you used nixos.

would really be interesting to hear someone talk who is comfortable to use both of them.