diff --git a/modules/base-system.nix b/modules/base-system.nix index 828d548..556dabb 100644 --- a/modules/base-system.nix +++ b/modules/base-system.nix @@ -77,11 +77,11 @@ in { # Make sure that I can login over the tailscale infrastructure while increasing security services.openssh = { enable = pkgs.lib.mkDefault true; - ports = [ 22 highSSHPort ]; + ports = [22 highSSHPort]; openFirewall = false; }; # Allow default port over VPN - networking.firewall.interfaces.${vpnInterface}.allowedTCPPorts = [ 22 highSSHPort ]; + networking.firewall.interfaces.${vpnInterface}.allowedTCPPorts = [22 highSSHPort]; # Add extra high port if requested for those outside the VPN networking.firewall.allowedTCPPorts = lib.optional cfg.ssh.openOutsideVPN highSSHPort; # Tailscale exit node seem to have a problem with strict checking