modified: README.md

modified:   modules/server/README.md
	new file:   modules/server/lxc-ssh.nix
	modified:   profiles/lxc.nix

modules/server/README.md

@@ -7,6 +7,7 @@
 🗄️ modules/server
 ├─ 📦 default.nix         # 聚合入口
 ├─ 🔐 ssh.nix             # OpenSSH 参数
+├─ 🔐 lxc-ssh.nix         # LXC OpenSSH 覆盖参数
 ├─ 🐳 docker.nix          # Docker 与清理策略
 └─ 📝 README.md
 ```

modules/server/lxc-ssh.nix

@@ -0,0 +1,8 @@
+{
+  # LXC 容器需要密码登录
+  services.openssh.settings = {
+    PermitRootLogin = "prohibit-password";
+    PasswordAuthentication = true;
+    KbdInteractiveAuthentication = true;
+  };
+}