summaryrefslogtreecommitdiff
path: root/sys/auth/openssh.nix
diff options
context:
space:
mode:
authorAlejandro Soto <alejandro@34project.org>2024-08-02 17:03:25 -0600
committerAlejandro Soto <alejandro@34project.org>2024-08-03 11:11:27 -0600
commit92848a9ab888518d7211327d7733f40814e7ccbf (patch)
tree2eeeacce2462f5c8b1eee9f429bd749668a3bf4b /sys/auth/openssh.nix
parentae67454d07f2e2cfe66dbfaa19b4296499171ba8 (diff)
sys/[lustrated]: initial commit
Diffstat (limited to 'sys/auth/openssh.nix')
-rw-r--r--sys/auth/openssh.nix7
1 files changed, 6 insertions, 1 deletions
diff --git a/sys/auth/openssh.nix b/sys/auth/openssh.nix
index 3bc3a78..87c6299 100644
--- a/sys/auth/openssh.nix
+++ b/sys/auth/openssh.nix
@@ -19,6 +19,11 @@ in
};
}) [ "ecdsa" "ed25519" "rsa" ]);
+ shiftPortNumber = mkOption {
+ type = types.bool;
+ default = true;
+ };
+
withDeployKeys = mkOption {
type = types.bool;
default = false;
@@ -39,7 +44,7 @@ in
services.openssh = {
enable = true;
openFirewall = true;
- ports = [ 2234 ];
+ ports = mkIf cfg.shiftPortNumber [ 2234 ];
startWhenNeeded = !config.services.fail2ban.enable;
hostKeys = map