infra/config/network.nix

15 lines
294 B
Nix

{
networking.firewall.enable = true;
services = {
fail2ban.enable = true;
openssh = {
enable = true;
ports = [1322];
settings = {
PasswordAuthentication = false;
PermitRootLogin = "no";
StreamLocalBindUnlink = "yes";
};
};
};
}