diff --git a/hosts/voyager/modules/dnsmasq.nix b/hosts/voyager/modules/dnsmasq.nix index cb1ab63..457ec10 100644 --- a/hosts/voyager/modules/dnsmasq.nix +++ b/hosts/voyager/modules/dnsmasq.nix @@ -3,7 +3,7 @@ _: services.dnsmasq = { enable = true; settings = { - dhcp-range = [ "10.11.1.100,10.11.1.200,12h" ]; + dhcp-range = [ "10.11.0.100,10.11.0.200,12h" ]; interface = "enp4s0"; server = [ "10.11.0.10" ]; diff --git a/hosts/voyager/modules/networking.nix b/hosts/voyager/modules/networking.nix index 83e75a1..8b4c2f9 100644 --- a/hosts/voyager/modules/networking.nix +++ b/hosts/voyager/modules/networking.nix @@ -29,9 +29,9 @@ _: firewall = { enable = true; - #extraCommands = '' - # iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT - #''; + extraCommands = '' + iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT + ''; }; }; } diff --git a/hosts/voyager/modules/ssh.nix b/hosts/voyager/modules/ssh.nix index 798faae..9040459 100644 --- a/hosts/voyager/modules/ssh.nix +++ b/hosts/voyager/modules/ssh.nix @@ -3,6 +3,13 @@ _: services = { openssh = { enable = true; + extraConfig = " + Port 51337 + PermitRootLogin no + PasswordAuthentication no + MaxSessions 1 + MaxAuthTries 1 + "; }; }; } diff --git a/hosts/voyager/modules/users.nix b/hosts/voyager/modules/users.nix index b9bd305..417faf6 100644 --- a/hosts/voyager/modules/users.nix +++ b/hosts/voyager/modules/users.nix @@ -9,7 +9,7 @@ _: security = { doas = { enable = true; - extraConfig = "permit nopass keepenv :wheel"; + extraConfig = "permit keepenv :wheel"; }; }; }