pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

metronom: use wireguard IP for SSH, lock down SSH

Browse source 
port access to wireguard only
This commit is contained in:
teutat3s 2024-05-29 10:30:33 +02:00
parent 9a9dccf5bb
commit 0038be3d2c
Signed by untrusted user: teutat3s
GPG key ID: 4FA1D3FA524F22C1
2 changed files with 11 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
flake.nix
View file

@ -127,7 +127,7 @@
sshUser = username; sshUser = username;
}; };
metronom = { metronom = {
hostname = "49.13.236.167"; hostname = "10.7.6.3";
sshUser = username; sshUser = username;
}; };
tankstelle = { tankstelle = {

20
hosts/metronom/wireguard.nix
View file

@ -41,14 +41,14 @@
}; };
}; };
#services.openssh.listenAddresses = [ services.openssh.listenAddresses = [
# { {
# addr = "10.7.6.3"; addr = "10.7.6.3";
# port = 22; port = 22;
# } }
# { {
# addr = "[fd00:fae:fae:fae:fae:3::]"; addr = "[fd00:fae:fae:fae:fae:3::]";
# port = 22; port = 22;
# } }
#]; ];
} }