pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

metronom, tankstelle: cleanup for SSH only via wireguard

Browse source
This commit is contained in:
teutat3s 2024-06-08 23:52:08 +02:00
parent ba76973cc5
commit e127c668f6
Signed by untrusted user: teutat3s
GPG key ID: 4FA1D3FA524F22C1
3 changed files with 10 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
hosts/metronom/networking.nix
View file

@ -16,7 +16,4 @@
networking.enableIPv6 = true;
networking.useDHCP = false;
networking.interfaces."enp1s0".useDHCP = true;
# TODO: ssh via wireguard only
services.openssh.openFirewall = true;
}

3
hosts/tankstelle/networking.nix
View file

@ -35,7 +35,4 @@
];
};
};
# TODO: ssh via wireguard only
services.openssh.openFirewall = true;
}

20
hosts/tankstelle/wireguard.nix
View file

@ -41,14 +41,14 @@
};
};
#services.openssh.listenAddresses = [
# {
# addr = "10.7.6.4";
# port = 22;
# }
# {
# addr = "[fd00:fae:fae:fae:fae:4::]";
# port = 22;
# }
#];
services.openssh.listenAddresses = [
{
addr = "10.7.6.4";
port = 22;
}
{
addr = "[fd00:fae:fae:fae:fae:4::]";
port = 22;
}
];
}