motiejus
/
config
1
Fork 0
Code Packages Releases Activity

rm sshguard

This commit is contained in:
Motiejus Jakštys 2024-08-27 08:44:05 +03:00
parent 0e48ec63f4
commit c2e58f1314
6 changed files with 0 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/fwminex/configuration.nix
View File

@ -369,7 +369,6 @@ in
};
services = {
sshguard.enable = true;
gitea.enable = true;
hass.enable = true;
syncthing-relay.enable = true;

1
hosts/mtworx/configuration.nix
View File

@ -85,7 +85,6 @@ in
};
services = {
sshguard.enable = false;
ssh8022.client = {
enable = true;
keyfile = config.age.secrets.ssh8022-client.path;

2
hosts/vno1-gdrx/configuration.nix
View File

@ -70,8 +70,6 @@ in
};
services = {
sshguard.enable = false;
ssh8022.client = {
enable = true;
keyfile = config.age.secrets.ssh8022-client.path;

1
hosts/vno3-rp3b/configuration.nix
View File

@ -78,7 +78,6 @@
services = {
tailscale.enable = true;
node_exporter.enable = true;
sshguard.enable = true;
borgstor = {
enable = true;

1
modules/services/default.nix
View File

@ -19,7 +19,6 @@
./postfix
./remote-builder
./ssh8022
./sshguard
./syncthing
./syncthing-relay
./tailscale

25
modules/services/sshguard/default.nix
View File

@ -1,25 +0,0 @@
{
config,
lib,
myData,
...
}:
{
options.mj.services.sshguard = with lib.types; {
enable = lib.mkOption {
type = bool;
default = false;
};
};
config = lib.mkIf config.mj.services.sshguard.enable {
services.sshguard = {
enable = true;
blocktime = 900;
whitelist = [
"192.168.0.0/16"
myData.subnets.tailscale.cidr
] ++ (lib.catAttrs "publicIP" (lib.attrValues myData.hosts));
};
};
}