diff options
| author | schererleander <leander@schererleander.de> | 2026-01-09 16:57:15 +0100 |
|---|---|---|
| committer | schererleander <leander@schererleander.de> | 2026-01-09 23:13:49 +0100 |
| commit | 3b5a73c436eb22e0cda59469263490705e149cb9 (patch) | |
| tree | ae3f20ca6008b11f71247dfc6e2df8218de9b95c /modules/hosts/server/openssh | |
| parent | ec45aae780da92e12cf82c5a32e336b14b7540ba (diff) | |
refactor: use flake-parts, change modules structure
Diffstat (limited to 'modules/hosts/server/openssh')
| -rw-r--r-- | modules/hosts/server/openssh/default.nix | 53 |
1 files changed, 0 insertions, 53 deletions
diff --git a/modules/hosts/server/openssh/default.nix b/modules/hosts/server/openssh/default.nix deleted file mode 100644 index fbb15db..0000000 --- a/modules/hosts/server/openssh/default.nix +++ /dev/null @@ -1,53 +0,0 @@ -{ - config, - username, - lib, - ... -}: -let - cfg = config.nx.server.openssh; - inherit (lib) mkOption types mkIf; -in -{ - options.nx.server.openssh = { - enable = mkOption { - description = "Setup openssh for server"; - type = types.bool; - default = false; - }; - port = mkOption { - description = "Port for openssh"; - type = types.port; - default = 8693; - }; - }; - - config = mkIf cfg.enable { - services.openssh = { - enable = true; - ports = [ cfg.port ]; - settings = { - PasswordAuthentication = false; - AllowUsers = [ username ]; - X11Forwarding = false; - PermitRootLogin = "yes"; - }; - }; - networking.firewall.allowedTCPPorts = [ cfg.port ]; - - services.fail2ban = { - jails = { - sshd = { - enabled = true; - settings = { - port = 8693; - backend = "systemd"; - maxretry = 4; - findtime = "10m"; - bantime = "1h"; - }; - }; - }; - }; - }; -} |
