diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-08-20 20:42:27 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-08-20 20:43:32 -0700 |
| commit | 552e62b8ae7f262a9246ba98142606512c018668 (patch) | |
| tree | 4624c548e25082354591de613c3513931f281283 /profiles/core | |
| parent | bump sapi to 1.2.10 (diff) | |
| download | infra-552e62b8ae7f262a9246ba98142606512c018668.tar.gz | |
initial configuration for fail2ban
We need to ensure the firewall is enabled and let's ensure that we open
the port for SSH.
Diffstat (limited to 'profiles/core')
| -rw-r--r-- | profiles/core/ssh.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/profiles/core/ssh.nix b/profiles/core/ssh.nix index f8c899a..b4c8772 100644 --- a/profiles/core/ssh.nix +++ b/profiles/core/ssh.nix @@ -1,5 +1,7 @@ { lib, ... }: { + networking.firewall.allowedTCPPorts = [ 22 ]; + services.openssh = { enable = lib.mkDefault true; settings = { |