ssh: integrate with sane.services.wan-ports

2023-05-28 20:39:18 +00:00
parent 35c9f2bf60
commit e4262cb0bc
2 changed files with 7 additions and 6 deletions
--- a/hosts/common/ssh.nix
+++ b/hosts/common/ssh.nix
@@ -30,4 +30,11 @@ in
    })
    (globalKeys ++ domainKeys)
  );
+
+  services.openssh = {
+    enable = true;
+    settings.PermitRootLogin = "no";
+    settings.PasswordAuthentication = false;
+  };
+  sane.services.wan-ports.tcp = [ 22 ];
 }
--- a/hosts/common/users.nix
+++ b/hosts/common/users.nix
@@ -129,11 +129,5 @@ in
      enable = true;
      wheelNeedsPassword = false;
    };
-
-    services.openssh = {
-      enable = true;
-      settings.PermitRootLogin = "no";
-      settings.PasswordAuthentication = false;
-    };
  };
 }