Only open SSH port when SSH is enabled

2025-11-16 16:02:35 +01:00
parent 27c5ec21a4
commit 59575b2ff9
3 changed files with 13 additions and 12 deletions
--- a/hosts/astyanax/configuration.nix
+++ b/hosts/astyanax/configuration.nix
@@ -46,7 +46,6 @@
  };

  networking.hostId = "80eef97e";
-  networking.firewall.allowedTCPPorts = [ 22 ];
  services.openssh = {
    enable = true;
    harden = true;
--- a/hosts/vm/configuration.nix
+++ b/hosts/vm/configuration.nix
@@ -66,7 +66,6 @@
  services.qemuGuest.enable = true;
  services.spice-vdagentd.enable = true;

-  networking.firewall.allowedTCPPorts = [ 22 ];
  services.openssh = {
    enable = true;
    harden = true;