From 552e62b8ae7f262a9246ba98142606512c018668 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Wed, 20 Aug 2025 20:42:27 -0700
Subject: initial configuration for fail2ban

We need to ensure the firewall is enabled and let's ensure that we open
the port for SSH.
---
 profiles/core/ssh.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'profiles/core/ssh.nix')

diff --git a/profiles/core/ssh.nix b/profiles/core/ssh.nix
index f8c899a..b4c8772 100644
--- a/profiles/core/ssh.nix
+++ b/profiles/core/ssh.nix
@@ -1,5 +1,7 @@
 { lib, ... }:
 {
+  networking.firewall.allowedTCPPorts = [ 22 ];
+
   services.openssh = {
     enable = lib.mkDefault true;
     settings = {
-- 
cgit v1.2.3