pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

metronom: use wireguard IP for SSH, lock down SSH

Browse source 
port access to wireguard only
This commit is contained in:
teutat3s 2024-05-29 10:30:33 +02:00
parent 9a9dccf5bb
commit 0038be3d2c
Signed by untrusted user: teutat3s
GPG key ID: 4FA1D3FA524F22C1
2 changed files with 11 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
flake.nix
View file

@ -127,7 +127,7 @@
sshUser = username;
};
metronom = {
hostname = "49.13.236.167";
hostname = "10.7.6.3";
sshUser = username;
};
tankstelle = {

20
hosts/metronom/wireguard.nix
View file

@ -41,14 +41,14 @@
};
};
#services.openssh.listenAddresses = [
# {
# addr = "10.7.6.3";
# port = 22;
# }
# {
# addr = "[fd00:fae:fae:fae:fae:3::]";
# port = 22;
# }
#];
services.openssh.listenAddresses = [
{
addr = "10.7.6.3";
port = 22;
}
{
addr = "[fd00:fae:fae:fae:fae:3::]";
port = 22;
}
];
}