infra/config/network.nix
2024-03-09 01:05:51 +01:00

12 lines
241 B
Nix

{
networking.firewall.enable = true;
services = {
fail2ban.enable = true;
openssh = {
enable = true;
ports = [1322];
settings.PasswordAuthentication = false;
settings.PermitRootLogin = "no";
};
};
}