sshguard is now optional

modules/base/default.nix

@@ -10,7 +10,6 @@
     ./fileSystems
     ./snapshot
     ./sshd
-    ./sshguard
     ./unitstatus
     ./users
     ./zfs

modules/services/default.nix

@@ -16,6 +16,7 @@
     ./nsd-acme
     ./postfix
     ./snmp_exporter
+    ./sshguard
     ./syncthing
     ./zfsunlock
   ];

modules/services/sshguard/default.nix

@@ -4,14 +4,14 @@
   myData,
   ...
 }: {
-  options.mj.base.sshguard = with lib.types; {
+  options.mj.services.sshguard = with lib.types; {
     enable = lib.mkOption {
       type = bool;
-      default = true;
+      default = false;
     };
   };
 
-  config = lib.mkIf config.mj.base.sshguard.enable {
+  config = lib.mkIf config.mj.services.sshguard.enable {
     services.sshguard = {
       enable = true;
       blocktime = 900;