pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

metronom, tankstelle: cleanup for SSH only via wireguard

Browse source
This commit is contained in:
teutat3s 2024-06-08 23:52:08 +02:00
parent ba76973cc5
commit e127c668f6
Signed by untrusted user: teutat3s
GPG key ID: 4FA1D3FA524F22C1
3 changed files with 10 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
hosts/metronom/networking.nix
View file

@ -16,7 +16,4 @@
networking.enableIPv6 = true; networking.enableIPv6 = true;
networking.useDHCP = false; networking.useDHCP = false;
networking.interfaces."enp1s0".useDHCP = true; networking.interfaces."enp1s0".useDHCP = true;
# TODO: ssh via wireguard only
services.openssh.openFirewall = true;
} }

3
hosts/tankstelle/networking.nix
View file

@ -35,7 +35,4 @@
]; ];
}; };
}; };
# TODO: ssh via wireguard only
services.openssh.openFirewall = true;
} }

20
hosts/tankstelle/wireguard.nix
View file

@ -41,14 +41,14 @@
}; };
}; };
#services.openssh.listenAddresses = [ services.openssh.listenAddresses = [
# { {
# addr = "10.7.6.4"; addr = "10.7.6.4";
# port = 22; port = 22;
# } }
# { {
# addr = "[fd00:fae:fae:fae:fae:4::]"; addr = "[fd00:fae:fae:fae:fae:4::]";
# port = 22; port = 22;
# } }
#]; ];
} }