Removed nonexistent option fron openssh config. Whitelist localhost in fail2ban.

2019-03-25 01:41:26 +01:00 · 2019-03-25 01:41:26 +01:00 · f6aed0e2a1
commit f6aed0e2a1
parent 31aa2297a4
2 changed files with 1 additions and 1 deletions
--- a/services/fail2ban.nix
+++ b/services/fail2ban.nix
@ -9,6 +9,7 @@ mkIf (elem "fail2ban" config.machine.services) {
    jails = { 
      DEFAULT = ''
        bantime  = 3600
+        ignoreip = 127.0.0.1
        logpath  = /var/log/auth.log
      '';

--- a/services/openssh.nix
+++ b/services/openssh.nix
@ -17,7 +17,6 @@ mkIf (elem "openssh" config.machine.services) {
    permitRootLogin = "no";
    extraConfig = ''
        UsePAM no
-        UseRoaming no
        AllowUsers derped git nix-ssh
        UsePrivilegeSeparation sandbox
        LogLevel VERBOSE