causalhonk/dots
1
0
Fork 0
forked from nico/dots
Code Pull requests Activity

openssh: fix opening firewall

Browse source
This commit is contained in:
Nico 2025-05-03 16:16:04 +10:00
parent f7357d75b9
commit 0561eaf54d
1 changed files with 1 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/services/ssh.nix
View file

@ -5,7 +5,7 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
allowSFTP = true; allowSFTP = true;
openFirewall = false; openFirewall = true;
authorizedKeysInHomedir = false; authorizedKeysInHomedir = false;
settings = { settings = {
PermitRootLogin = "no"; PermitRootLogin = "no";
@ -19,9 +19,6 @@
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHzUJnqCpbRxggjyIZo4KWnTyHobPdi/xXkN1/n/yIMD" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHzUJnqCpbRxggjyIZo4KWnTyHobPdi/xXkN1/n/yIMD"
]; ];
# enable ssh in the firewall
networking.firewall.allowedTCPPorts = [ 22 ];
# enable fail2ban # enable fail2ban
services.fail2ban.enable = true; services.fail2ban.enable = true;
} }