From 1e23ccafc3940a23dfd389dc460d025b44027663 Mon Sep 17 00:00:00 2001
From: "Timothy J. Aveni" <tja@berkeley.edu>
Date: Sat, 27 Jun 2026 22:18:35 -0700
Subject: [PATCH] Disable SSH in baseline AMI

---
 nixos/baseline.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/baseline.nix b/nixos/baseline.nix
index e994de8..61fafcf 100644
--- a/nixos/baseline.nix
+++ b/nixos/baseline.nix
@@ -20,6 +20,7 @@ in
   ];
 
   services.amazon-ssm-agent.enable = true;
+  services.openssh.enable = lib.mkForce false;
 
   boot.supportedFilesystems = [ "zfs" ];
   boot.zfs.extraPools = [ nixPool ];