ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add f2b bypass for tailnet

Browse source
This commit is contained in:
RingOfStorms (Joshua Bell) 2025-03-19 09:26:18 -05:00
parent 8b2a1b1f4f
commit 19d97c8de5
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
common/programs/ssh.nix
View file

@ -29,7 +29,7 @@ in
default = true;
description = "Enable fail2ban.";
};
allowRootPasswordLogin = lib.mkOption {
allowPasswordLogin = lib.mkOption {
type = lib.types.bool;
default = false;
description = "Allow root password login.";
@ -45,6 +45,10 @@ in
# Use fail2ban
services.fail2ban = lib.mkIf cfg.fail2Ban {
enable = true;
# Ignore my tailnet
ignoreIP = [
"100.64.0.0/10"
];
};
# Open ports in the firewall if enabled.
@ -58,7 +62,7 @@ in
settings = {
LogLevel = "VERBOSE";
PermitRootLogin = "yes";
PasswordAuthentication = if cfg.allowRootPasswordLogin then true else false;
PasswordAuthentication = cfg.allowPasswordLogin;
};
};