From e97164871b160f21f32c7fd77e4773b4c1fe366a Mon Sep 17 00:00:00 2001 From: Vineet Kumar Date: Tue, 19 May 2026 11:52:55 -0400 Subject: saklas: update firewall --- epistemia/systems/saklas.scm | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/epistemia/systems/saklas.scm b/epistemia/systems/saklas.scm index 5aba985..fa0fbc1 100644 --- a/epistemia/systems/saklas.scm +++ b/epistemia/systems/saklas.scm @@ -151,7 +151,7 @@ table inet filter { iifname wg1 accept # reject everything else - log prefix \"BLOCK: \" reject with icmpx type port-unreachable + reject with icmpx type port-unreachable } chain forward { @@ -307,11 +307,7 @@ table inet filter { (string-append "nameserver 127.0.0.1\n" "search epistemia\n"))))) - (service (fail2ban-jail-service - openssh-service-type - (fail2ban-jail-configuration - (name "sshd") - (enabled? #t))) + (service openssh-service-type (openssh-configuration (permit-root-login 'prohibit-password) (password-authentication? #f) -- cgit v1.2.3