diff --git a/colmena/remote.nix b/colmena/remote.nix index 47191f7..84c28bd 100644 --- a/colmena/remote.nix +++ b/colmena/remote.nix @@ -7,10 +7,5 @@ tags = [ "remote" ]; }; - # Required for remote builds security.sudo.wheelNeedsPassword = false; - - imports = [ - ../common/openssh.nix - ]; } diff --git a/common/openssh.nix b/common/ssh.nix similarity index 80% rename from common/openssh.nix rename to common/ssh.nix index 6715088..d8dd364 100644 --- a/common/openssh.nix +++ b/common/ssh.nix @@ -10,6 +10,4 @@ }; services.fail2ban.enable = true; - - networking.firewall.allowedTCPPorts = [ 22 ]; } \ No newline at end of file diff --git a/hive.nix b/hive.nix index e3ccd2b..7251c01 100644 --- a/hive.nix +++ b/hive.nix @@ -23,6 +23,7 @@ in { (import "${sources.home-manager}/nixos") (import "${sources.agenix}/modules/age.nix") ./pinning.nix + ./common/ssh.nix ./common/sudo.nix ./common/utilities.nix ./users/qenya.nix