megamanmalte/nixos
0
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Formatting

Browse source
This commit is contained in:
Malte Tammena 2022-05-23 15:52:27 +02:00
parent 08186882b6
commit 185acebc75
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/base-system.nix
View file

@ -77,11 +77,11 @@ in {
# Make sure that I can login over the tailscale infrastructure while increasing security
services.openssh = {
enable = pkgs.lib.mkDefault true;
ports = [ 22 highSSHPort ];
ports = [22 highSSHPort];
openFirewall = false;
};
# Allow default port over VPN
networking.firewall.interfaces.${vpnInterface}.allowedTCPPorts = [ 22 highSSHPort ];
networking.firewall.interfaces.${vpnInterface}.allowedTCPPorts = [22 highSSHPort];
# Add extra high port if requested for those outside the VPN
networking.firewall.allowedTCPPorts = lib.optional cfg.ssh.openOutsideVPN highSSHPort;
# Tailscale exit node seem to have a problem with strict checking