openssh: enable by default but without opening firewall

1 files changed, 5 insertions, 0 deletions

diff --git a/config/shared.nix b/config/shared.nix
index c947654..b9a2b87 100644
--- a/config/shared.nix
+++ b/config/shared.nix
@@ -57,6 +57,11 @@
     };                                                                     
   };
   services.gnome.gnome-keyring.enable = true;
+  services.openssh = {
+    enable = true;
+    openFirewall = false;
+    settings.AllowUsers = [ "jras" ];
+  };
 
   systemd.user.services.kanshi = {
     description = "kanshi daemon";