diff options
| author | schererleander <leander@schererleander.de> | 2026-02-05 12:03:07 +0100 |
|---|---|---|
| committer | schererleander <leander@schererleander.de> | 2026-02-05 15:19:41 +0100 |
| commit | 3b13d9a2a367db84d48940460532c17a374bb488 (patch) | |
| tree | 599110a39c4baecf3991fe9a58d0103a43c38896 /modules/nixos/server/openssh/default.nix | |
| parent | 46aa4842b98d9215baca00060c233f386a0c2188 (diff) | |
feat(modules): use dendritic pattern
Diffstat (limited to 'modules/nixos/server/openssh/default.nix')
| -rw-r--r-- | modules/nixos/server/openssh/default.nix | 44 |
1 files changed, 0 insertions, 44 deletions
diff --git a/modules/nixos/server/openssh/default.nix b/modules/nixos/server/openssh/default.nix deleted file mode 100644 index 0972e66..0000000 --- a/modules/nixos/server/openssh/default.nix +++ /dev/null @@ -1,44 +0,0 @@ -{ - config, - lib, - ... -}: - -let - inherit (lib) mkEnableOption mkIf mkDefault; - cfg = config.nx.server.openssh; -in -{ - options.nx.server.openssh = { - enable = mkEnableOption "OpenSSH server"; - }; - - config = mkIf cfg.enable { - services.openssh = { - enable = true; - ports = [ 8693 ]; - settings = { - PasswordAuthentication = false; - X11Forwarding = false; - PermitRootLogin = "yes"; - }; - }; - networking.firewall.allowedTCPPorts = [ 8693 ]; - - services.fail2ban = { - enable = true; - bantime = lib.mkDefault "1h"; - jails = { - sshd = { - enabled = true; - settings = { - port = 8693; - backend = "systemd"; - maxretry = 4; - findtime = "10m"; - }; - }; - }; - }; - }; -} |
