sshguard is now optional

This commit is contained in:
Motiejus Jakštys 2023-09-14 06:41:16 +03:00
parent f34af96bc4
commit 85917635fd
7 changed files with 8 additions and 4 deletions

View File

@ -44,6 +44,7 @@
services = {
node_exporter.enable = true;
sshguard.enable = true;
postfix = {
enable = true;

View File

@ -76,6 +76,7 @@
services = {
node_exporter.enable = true;
sshguard.false = true;
deployerbot = {
follower = {

View File

@ -161,6 +161,7 @@
gitea.enable = true;
snmp_exporter.enable = true;
sshguard.enable = true;
headscale = {
enable = true;

View File

@ -61,6 +61,7 @@
services = {
node_exporter.enable = true;
sshguard.enable = true;
borgstor = {
enable = true;

View File

@ -10,7 +10,6 @@
./fileSystems
./snapshot
./sshd
./sshguard
./unitstatus
./users
./zfs

View File

@ -16,6 +16,7 @@
./nsd-acme
./postfix
./snmp_exporter
./sshguard
./syncthing
./zfsunlock
];

View File

@ -4,14 +4,14 @@
myData,
...
}: {
options.mj.base.sshguard = with lib.types; {
options.mj.services.sshguard = with lib.types; {
enable = lib.mkOption {
type = bool;
default = true;
default = false;
};
};
config = lib.mkIf config.mj.base.sshguard.enable {
config = lib.mkIf config.mj.services.sshguard.enable {
services.sshguard = {
enable = true;
blocktime = 900;