From 3b13d9a2a367db84d48940460532c17a374bb488 Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Thu, 5 Feb 2026 12:03:07 +0100
Subject: feat(modules): use dendritic pattern

---
 modules/services/openssh.nix | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 modules/services/openssh.nix

(limited to 'modules/services/openssh.nix')

diff --git a/modules/services/openssh.nix b/modules/services/openssh.nix
new file mode 100644
index 0000000..68d1511
--- /dev/null
+++ b/modules/services/openssh.nix
@@ -0,0 +1,35 @@
+{
+  flake.modules.nixos.openssh =
+    {
+      lib,
+      ...
+    }:
+    {
+      services.openssh = {
+        enable = true;
+        ports = [ 8693 ];
+        settings = {
+          PasswordAuthentication = false;
+          X11Forwarding = false;
+          PermitRootLogin = "yes";
+        };
+      };
+      networking.firewall.allowedTCPPorts = [ 8693 ];
+
+      services.fail2ban = {
+        enable = true;
+        bantime = lib.mkDefault "1h";
+        jails = {
+          sshd = {
+            enabled = true;
+            settings = {
+              port = 8693;
+              backend = "systemd";
+              maxretry = 4;
+              findtime = "10m";
+            };
+          };
+        };
+      };
+    };
+}
-- 
cgit v1.3.1