voronind/nix
0
0
Fork 0
Code Issues 38 Pull requests Packages Projects Releases Wiki Activity

Sshd: Listen to ipv6.

Browse source
This commit is contained in:
Dmitry Voronin 2025-01-05 09:11:01 +03:00
parent 21a85aea62
commit 642ce3d327
Signed by: voronind
SSH key fingerprint: SHA256:3kBb4iV2ahufEBNq+vFbUe4QYfHt98DHQjN7QaptY9k
2 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
host/x86_64-linux/home/Network.nix
View file

@ -148,8 +148,7 @@ in
iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -d 0/0 -o ${wan} -j MASQUERADE iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -d 0/0 -o ${wan} -j MASQUERADE
# Full access from Lan. # Full access from Lan.
iptables -I INPUT -j ACCEPT -i ${lan} ip46tables -I INPUT -j ACCEPT -i ${lan}
ip6tables -I INPUT -j ACCEPT -i ${lan}
# Public email server. # Public email server.
ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 25 ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 25

4
system/Sshd.nix
View file

@ -10,6 +10,10 @@
addr = "0.0.0.0"; addr = "0.0.0.0";
port = 22143; port = 22143;
} }
{
addr = "[::]";
port = 22143;
}
]; ];
settings = { settings = {
GSSAPIAuthentication = false; GSSAPIAuthentication = false;