made some changes

hosts/voyager/modules/dnsmasq.nix

@@ -3,7 +3,7 @@ _:
   services.dnsmasq = {
     enable = true;
     settings = {
-      dhcp-range = [ "10.11.1.100,10.11.1.200,12h" ];
+      dhcp-range = [ "10.11.0.100,10.11.0.200,12h" ];
       interface = "enp4s0";
       
       server = [ "10.11.0.10" ]; 

hosts/voyager/modules/networking.nix

@@ -29,9 +29,9 @@ _:
 
     firewall = {
       enable = true;
-      #extraCommands = ''
-      #  iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT
-      #'';
+      extraCommands = ''
+        iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT
+      '';
     };
   };
 }

hosts/voyager/modules/ssh.nix

@@ -3,6 +3,13 @@ _:
   services = {
     openssh = {
       enable = true;
+      extraConfig = "
+         Port 51337
+         PermitRootLogin no
+         PasswordAuthentication no
+         MaxSessions 1
+         MaxAuthTries 1
+      ";
     };
   };
 }

hosts/voyager/modules/users.nix

@@ -9,7 +9,7 @@ _:
   security = {
     doas = {
       enable = true;
-      extraConfig = "permit nopass keepenv :wheel";
+      extraConfig = "permit keepenv :wheel";
     };
   };
 }