-1

hosts/bluepill-proxy/default.nix

··· 2 2 imports = [ 3 3 ./hardware.nix 4 4 ./modules/caddy.nix 5 5 - ./modules/fail2ban.nix 6 5 ]; 7 6 8 7 networking.hostName = "bluepill-proxy";

-3

hosts/bluepill-proxy/modules/fail2ban.nix

··· 1 1 - {...}: { 2 2 - services.fail2ban.enable = true; 3 3 - }

+1

modules/nixos/default.nix

··· 1 1 {lib, ...}: { 2 2 imports = [ 3 3 ./modules/fwupd.nix 4 4 + # does NOT enable sshd by default, just sets some options for security reasons. tailscale ssh seems to work without sshd 4 5 ./modules/ssh.nix 5 6 ./modules/tailscale.nix 6 7 ];

-2

modules/nixos/modules/ssh.nix

··· 1 1 {...}: { 2 2 services = { 3 3 openssh = { 4 4 - enable = true; 5 5 - ports = [ 2222 ]; 6 4 settings = { 7 5 LogLevel = "VERBOSE"; 8 6 PasswordAuthentication = false;