fra1-b: block global sshd

2024-08-27 08:36:02 +03:00
parent d91976dafc
commit 96a98405ad
2 changed files with 21 additions and 13 deletions
--- a/hosts/fra1-b/configuration.nix
+++ b/hosts/fra1-b/configuration.nix
@@ -70,7 +70,6 @@ in

    services = {
      node_exporter.enable = true;
-      sshguard.enable = true;
      tailscale.enable = true;

      ssh8022.server = {
@@ -127,10 +126,7 @@ in
    useDHCP = true;
    firewall = {
      allowedUDPPorts = [ 53 ];
-      allowedTCPPorts = [
-        22
-        53
-      ];
+      allowedTCPPorts = [ 53 ];
    };
  };