sshguard is now optional

hosts/fra1-a/configuration.nix

@@ -44,6 +44,7 @@
 
     services = {
       node_exporter.enable = true;
+      sshguard.enable = true;
 
       postfix = {
         enable = true;

hosts/fwminex/configuration.nix

@@ -76,6 +76,7 @@
 
     services = {
       node_exporter.enable = true;
+      sshguard.false = true;
 
       deployerbot = {
         follower = {

hosts/vno1-oh2/configuration.nix

@@ -161,6 +161,7 @@
       gitea.enable = true;
 
       snmp_exporter.enable = true;
+      sshguard.enable = true;
 
       headscale = {
         enable = true;

hosts/vno1-rp3b/configuration.nix

@@ -61,6 +61,7 @@
 
     services = {
       node_exporter.enable = true;
+      sshguard.enable = true;
 
       borgstor = {
         enable = true;

modules/base/default.nix

@@ -10,7 +10,6 @@
     ./fileSystems
     ./snapshot
     ./sshd
-    ./sshguard
     ./unitstatus
     ./users
     ./zfs

modules/services/default.nix

@@ -16,6 +16,7 @@
     ./nsd-acme
     ./postfix
     ./snmp_exporter
+    ./sshguard
     ./syncthing
     ./zfsunlock
   ];

modules/services/sshguard/default.nix

@@ -4,14 +4,14 @@
   myData,
   ...
 }: {
-  options.mj.base.sshguard = with lib.types; {
+  options.mj.services.sshguard = with lib.types; {
     enable = lib.mkOption {
       type = bool;
-      default = true;
+      default = false;
     };
   };
 
-  config = lib.mkIf config.mj.base.sshguard.enable {
+  config = lib.mkIf config.mj.services.sshguard.enable {
     services.sshguard = {
       enable = true;
       blocktime = 900;