···2020 networking.useNetworkd = true;
21212222 services.openssh.extraConfig = ''
2323- # for all users other than git, only allow from lan and Tailscale
2424- Match User *,!git Address !192.168.4.0/22,!100.64.0.0/10,!127.0.0.1
2525- DenyUsers *
2323+ # For all users except git, only allow from LAN and Tailscale
2424+ Match User *,!git
2525+ AllowUsers *@192.168.4.0/22 *@100.64.0.0/10 *@127.0.0.1
2626 '';
27272828 system.autoUpgrade = {