4 files changed, 12 insertions, 3 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix
index e1cd540..e8b32d2 100644
--- a/hosts/arrakis/default.nix
+++ b/hosts/arrakis/default.nix
@@ -41,7 +41,11 @@
     nftables.enable = true;
   };
 
-  services.openssh.settings.X11Forwarding = true;
+  services.openssh = {
+    openFirewall = true;
+    settings.X11Forwarding = true;
+  };
+
   services.xserver.videoDrivers = [ "nvidia" ];
 
   #sops = {
diff --git a/hosts/common/optional/services/openssh.nix b/hosts/common/optional/services/openssh.nix
index 33cdbac..424d3bf 100644
--- a/hosts/common/optional/services/openssh.nix
+++ b/hosts/common/optional/services/openssh.nix
@@ -1,7 +1,6 @@
 {
   services.openssh = {
     enable = true;
-    openFirewall = true;
     settings = {
       KbdInteractiveAuthentication = false;
       PasswordAuthentication = false;
diff --git a/hosts/darkstar/default.nix b/hosts/darkstar/default.nix
index b9b4e39..0e4541d 100644
--- a/hosts/darkstar/default.nix
+++ b/hosts/darkstar/default.nix
@@ -79,6 +79,8 @@
     #};
   };
 
+  services.openssh.openFirewall = true;
+
   sops = {
     age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
     defaultSopsFile = ../secrets/darkstar.yaml;
diff --git a/hosts/ginaz/default.nix b/hosts/ginaz/default.nix
index 3812f41..67fd037 100644
--- a/hosts/ginaz/default.nix
+++ b/hosts/ginaz/default.nix
@@ -43,7 +43,11 @@
     nftables.enable = true;
   };
 
-  services.openssh.settings.X11Forwarding = true;
+  services.openssh = {
+    openFirewall = true;
+    settings.X11Forwarding = true;
+  };
+
   services.xserver.videoDrivers = [ "amdgpu" ];
 
   sops = {