1 files changed, 35 insertions, 0 deletions
diff --git a/modules/services/openssh.nix b/modules/services/openssh.nix
new file mode 100644
index 0000000..68d1511
--- /dev/null
+++ b/modules/services/openssh.nix
@@ -0,0 +1,35 @@
+{
+  flake.modules.nixos.openssh =
+    {
+      lib,
+      ...
+    }:
+    {
+      services.openssh = {
+        enable = true;
+        ports = [ 8693 ];
+        settings = {
+          PasswordAuthentication = false;
+          X11Forwarding = false;
+          PermitRootLogin = "yes";
+        };
+      };
+      networking.firewall.allowedTCPPorts = [ 8693 ];
+
+      services.fail2ban = {
+        enable = true;
+        bantime = lib.mkDefault "1h";
+        jails = {
+          sshd = {
+            enabled = true;
+            settings = {
+              port = 8693;
+              backend = "systemd";
+              maxretry = 4;
+              findtime = "10m";
+            };
+          };
+        };
+      };
+    };
+}