commit e97164871b160f21f32c7fd77e4773b4c1fe366a parent 220925e37a0f51ce253b959f481d95dd67ae86f4 Author: Vineet Kumar <git@vineetk.net> Date: Tue, 19 May 2026 11:52:55 -0400 saklas: update firewall Diffstat:
| M | epistemia/systems/saklas.scm | | | 8 | ++------ |
1 file changed, 2 insertions(+), 6 deletions(-)
diff --git a/epistemia/systems/saklas.scm b/epistemia/systems/saklas.scm @@ -151,7 +151,7 @@ table inet filter { iifname wg1 accept # reject everything else - log prefix \"BLOCK: \" reject with icmpx type port-unreachable + reject with icmpx type port-unreachable } chain forward { @@ -307,11 +307,7 @@ table inet filter { (string-append "nameserver 127.0.0.1\n" "search epistemia\n"))))) - (service (fail2ban-jail-service - openssh-service-type - (fail2ban-jail-configuration - (name "sshd") - (enabled? #t))) + (service openssh-service-type (openssh-configuration (permit-root-login 'prohibit-password) (password-authentication? #f)