sshguard is now optional

2023-09-14 06:41:16 +03:00
parent f34af96bc4
commit 85917635fd
7 changed files with 8 additions and 4 deletions
--- a/modules/base/default.nix
+++ b/modules/base/default.nix
@@ -10,7 +10,6 @@
    ./fileSystems
    ./snapshot
    ./sshd
-    ./sshguard
    ./unitstatus
    ./users
    ./zfs
--- a/modules/base/sshguard/default.nix
+++ b/modules/base/sshguard/default.nix
@@ -1,23 +0,0 @@
-{
-  config,
-  lib,
-  myData,
-  ...
-}: {
-  options.mj.base.sshguard = with lib.types; {
-    enable = lib.mkOption {
-      type = bool;
-      default = true;
-    };
-  };
-
-  config = lib.mkIf config.mj.base.sshguard.enable {
-    services.sshguard = {
-      enable = true;
-      blocktime = 900;
-      whitelist =
-        ["192.168.0.0/16" myData.subnets.tailscale.cidr]
-        ++ (lib.catAttrs "publicIP" (lib.attrValues myData.hosts));
-    };
-  };
-}