lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

clouvider-lon01: disable SSH open-to-all

Browse source
This commit is contained in:
Luke Granger-Brown 2021-01-12 00:00:34 +00:00
parent ad516941e8
commit d20dd06aaf
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ops/nixos/clouvider-lon01/default.nix
View file

@ -131,7 +131,7 @@ in {
}; };
my.ip.tailscale = "100.79.173.25"; my.ip.tailscale = "100.79.173.25";
services.openssh.openFirewall = true; # TODO: make this false once I know it works services.openssh.openFirewall = false; # allowed by networking.firewall.extraCommands
services.openssh.hostKeys = [ services.openssh.hostKeys = [
{ {
path = "/persist/etc/ssh/ssh_host_ed25519_key"; path = "/persist/etc/ssh/ssh_host_ed25519_key";