clouvider-lon01: disable SSH open-to-all

2021-01-12 00:00:34 +00:00 · 2021-01-12 00:00:34 +00:00 · d20dd06aaf
commit d20dd06aaf
parent ad516941e8
1 changed files with 1 additions and 1 deletions
--- a/ops/nixos/clouvider-lon01/default.nix
+++ b/ops/nixos/clouvider-lon01/default.nix
@ -131,7 +131,7 @@ in {
  };
  my.ip.tailscale = "100.79.173.25";

-  services.openssh.openFirewall = true;  # TODO: make this false once I know it works
+  services.openssh.openFirewall = false;  # allowed by networking.firewall.extraCommands
  services.openssh.hostKeys = [
    {
      path = "/persist/etc/ssh/ssh_host_ed25519_key";