From f6aed0e2a1da5a529e746a21367bc1bd8df8cd88 Mon Sep 17 00:00:00 2001
From: derped <derped@ophanim.de>
Date: Mon, 25 Mar 2019 01:41:26 +0100
Subject: [PATCH] Removed nonexistent option fron openssh config. Whitelist
 localhost in fail2ban.

---
 services/fail2ban.nix | 1 +
 services/openssh.nix  | 1 -
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/fail2ban.nix b/services/fail2ban.nix
index c0e228a..b959a22 100644
--- a/services/fail2ban.nix
+++ b/services/fail2ban.nix
@@ -9,6 +9,7 @@ mkIf (elem "fail2ban" config.machine.services) {
     jails = { 
       DEFAULT = ''
         bantime  = 3600
+        ignoreip = 127.0.0.1
         logpath  = /var/log/auth.log
       '';
 
diff --git a/services/openssh.nix b/services/openssh.nix
index 72c7e09..3f14bce 100644
--- a/services/openssh.nix
+++ b/services/openssh.nix
@@ -17,7 +17,6 @@ mkIf (elem "openssh" config.machine.services) {
     permitRootLogin = "no";
     extraConfig = ''
         UsePAM no
-        UseRoaming no
         AllowUsers derped git nix-ssh
         UsePrivilegeSeparation sandbox
         LogLevel VERBOSE