From c29fbaad0d1a6135d6eb6212868e4de1604b57b4 Mon Sep 17 00:00:00 2001
From: halbg0tt <halbg0tt@protonmail.com>
Date: Wed, 8 Jul 2026 14:28:10 +0200
Subject: [PATCH] made some changes

---
 hosts/voyager/modules/dnsmasq.nix    | 2 +-
 hosts/voyager/modules/networking.nix | 6 +++---
 hosts/voyager/modules/ssh.nix        | 7 +++++++
 hosts/voyager/modules/users.nix      | 2 +-
 4 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/hosts/voyager/modules/dnsmasq.nix b/hosts/voyager/modules/dnsmasq.nix
index cb1ab63..457ec10 100644
--- a/hosts/voyager/modules/dnsmasq.nix
+++ b/hosts/voyager/modules/dnsmasq.nix
@@ -3,7 +3,7 @@ _:
   services.dnsmasq = {
     enable = true;
     settings = {
-      dhcp-range = [ "10.11.1.100,10.11.1.200,12h" ];
+      dhcp-range = [ "10.11.0.100,10.11.0.200,12h" ];
       interface = "enp4s0";
       
       server = [ "10.11.0.10" ]; 
diff --git a/hosts/voyager/modules/networking.nix b/hosts/voyager/modules/networking.nix
index 83e75a1..8b4c2f9 100644
--- a/hosts/voyager/modules/networking.nix
+++ b/hosts/voyager/modules/networking.nix
@@ -29,9 +29,9 @@ _:
 
     firewall = {
       enable = true;
-      #extraCommands = ''
-      #  iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT
-      #'';
+      extraCommands = ''
+        iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT
+      '';
     };
   };
 }
diff --git a/hosts/voyager/modules/ssh.nix b/hosts/voyager/modules/ssh.nix
index 798faae..9040459 100644
--- a/hosts/voyager/modules/ssh.nix
+++ b/hosts/voyager/modules/ssh.nix
@@ -3,6 +3,13 @@ _:
   services = {
     openssh = {
       enable = true;
+      extraConfig = "
+         Port 51337
+         PermitRootLogin no
+         PasswordAuthentication no
+         MaxSessions 1
+         MaxAuthTries 1
+      ";
     };
   };
 }
diff --git a/hosts/voyager/modules/users.nix b/hosts/voyager/modules/users.nix
index b9bd305..417faf6 100644
--- a/hosts/voyager/modules/users.nix
+++ b/hosts/voyager/modules/users.nix
@@ -9,7 +9,7 @@ _:
   security = {
     doas = {
       enable = true;
-      extraConfig = "permit nopass keepenv :wheel";
+      extraConfig = "permit keepenv :wheel";
     };
   };
 }