diff --git a/modules/capabilities/services/openssh.nix b/modules/capabilities/services/openssh.nix index f6343eb..4977709 100644 --- a/modules/capabilities/services/openssh.nix +++ b/modules/capabilities/services/openssh.nix @@ -18,8 +18,6 @@ in flake.modules.nixos.openssh = { ... }: { - services.openssh.openFirewall = true; - services.openssh = { enable = true; settings = { diff --git a/modules/hosts/polaris/default.nix b/modules/hosts/polaris/default.nix index 47022e4..509c898 100644 --- a/modules/hosts/polaris/default.nix +++ b/modules/hosts/polaris/default.nix @@ -37,6 +37,7 @@ in { imports = [ nixosModules.workstation-base + nixosModules.openssh nixosModules.steam ./_hardware.nix ] @@ -46,5 +47,10 @@ in common-cpu-amd common-gpu-amd ]); + + services.openssh.openFirewall = false; + networking.firewall.extraInputRules = '' + ip saddr 192.168.178.0/24 tcp dport 22 accept + ''; }; }