aboutsummaryrefslogtreecommitdiffstats
path: root/hosts/ginaz
diff options
context:
space:
mode:
authorMark Nipper <nipsy@bitgnome.net>2024-07-16 09:01:17 -0700
committerMark Nipper <nipsy@bitgnome.net>2024-07-16 09:01:17 -0700
commit04a5481eae0379165dcfc4b6ca70ef66d1d33d62 (patch)
tree55960aa30bf75dc396a0ba16e591a8179002c13e /hosts/ginaz
parentd71d2bd7112b4085d67c3ca775b7b38185fd4be2 (diff)
downloadnix-04a5481eae0379165dcfc4b6ca70ef66d1d33d62.tar
nix-04a5481eae0379165dcfc4b6ca70ef66d1d33d62.tar.gz
nix-04a5481eae0379165dcfc4b6ca70ef66d1d33d62.tar.bz2
nix-04a5481eae0379165dcfc4b6ca70ef66d1d33d62.tar.lz
nix-04a5481eae0379165dcfc4b6ca70ef66d1d33d62.tar.xz
nix-04a5481eae0379165dcfc4b6ca70ef66d1d33d62.tar.zst
nix-04a5481eae0379165dcfc4b6ca70ef66d1d33d62.zip
Close SSH through firewall by default
Diffstat (limited to 'hosts/ginaz')
-rw-r--r--hosts/ginaz/default.nix6
1 files changed, 5 insertions, 1 deletions
diff --git a/hosts/ginaz/default.nix b/hosts/ginaz/default.nix
index 3812f41..67fd037 100644
--- a/hosts/ginaz/default.nix
+++ b/hosts/ginaz/default.nix
@@ -43,7 +43,11 @@
nftables.enable = true;
};
- services.openssh.settings.X11Forwarding = true;
+ services.openssh = {
+ openFirewall = true;
+ settings.X11Forwarding = true;
+ };
+
services.xserver.videoDrivers = [ "amdgpu" ];
sops = {