saklas: update firewall

1 files changed, 2 insertions, 6 deletions

diff --git a/epistemia/systems/saklas.scm b/epistemia/systems/saklas.scm
index 5aba985..fa0fbc1 100644
--- a/epistemia/systems/saklas.scm
+++ b/epistemia/systems/saklas.scm
@@ -151,7 +151,7 @@ table inet filter {
     iifname wg1 accept
 
     # reject everything else
-    log prefix \"BLOCK: \" reject with icmpx type port-unreachable
+    reject with icmpx type port-unreachable
   }
 
   chain forward {
@@ -307,11 +307,7 @@ table inet filter {
                                                                            (string-append
                                                                             "nameserver 127.0.0.1\n"
                                                                             "search epistemia\n")))))
-                                           (service (fail2ban-jail-service
-                                                     openssh-service-type
-                                                     (fail2ban-jail-configuration
-                                                       (name "sshd")
-                                                       (enabled? #t)))
+                                           (service openssh-service-type
                                                     (openssh-configuration
                                                       (permit-root-login 'prohibit-password)
                                                       (password-authentication? #f)