diff options
| -rw-r--r-- | epistemia/systems/saklas.scm | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/epistemia/systems/saklas.scm b/epistemia/systems/saklas.scm index 5aba985..fa0fbc1 100644 --- a/epistemia/systems/saklas.scm +++ b/epistemia/systems/saklas.scm | |||
| @@ -151,7 +151,7 @@ table inet filter { | |||
| 151 | iifname wg1 accept | 151 | iifname wg1 accept |
| 152 | 152 | ||
| 153 | # reject everything else | 153 | # reject everything else |
| 154 | log prefix \"BLOCK: \" reject with icmpx type port-unreachable | 154 | reject with icmpx type port-unreachable |
| 155 | } | 155 | } |
| 156 | 156 | ||
| 157 | chain forward { | 157 | chain forward { |
| @@ -307,11 +307,7 @@ table inet filter { | |||
| 307 | (string-append | 307 | (string-append |
| 308 | "nameserver 127.0.0.1\n" | 308 | "nameserver 127.0.0.1\n" |
| 309 | "search epistemia\n"))))) | 309 | "search epistemia\n"))))) |
| 310 | (service (fail2ban-jail-service | 310 | (service openssh-service-type |
| 311 | openssh-service-type | ||
| 312 | (fail2ban-jail-configuration | ||
| 313 | (name "sshd") | ||
| 314 | (enabled? #t))) | ||
| 315 | (openssh-configuration | 311 | (openssh-configuration |
| 316 | (permit-root-login 'prohibit-password) | 312 | (permit-root-login 'prohibit-password) |
| 317 | (password-authentication? #f) | 313 | (password-authentication? #f) |