From 31302991da9c53a83c93a63369ef67978a7c85c1 Mon Sep 17 00:00:00 2001
From: Jasper Ras <jaspert.ras@gmail.com>
Date: Thu, 14 Nov 2024 14:43:09 +0100
Subject: openssh: enable by default but without opening firewall

---
 config/shared.nix | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'config')

diff --git a/config/shared.nix b/config/shared.nix
index c947654..b9a2b87 100644
--- a/config/shared.nix
+++ b/config/shared.nix
@@ -57,6 +57,11 @@
     };                                                                     
   };
   services.gnome.gnome-keyring.enable = true;
+  services.openssh = {
+    enable = true;
+    openFirewall = false;
+    settings.AllowUsers = [ "jras" ];
+  };
 
   systemd.user.services.kanshi = {
     description = "kanshi daemon";
-- 
cgit v1.2.3