From 0962aedea8790ae4e948b182c7b6b7dfa878fd90 Mon Sep 17 00:00:00 2001 From: Anirudh Oppiliappan Date: Thu, 14 May 2026 11:44:41 +0300 Subject: [PATCH] hosts/knot1: more intricate ssh config options Signed-off-by: Anirudh Oppiliappan --- flake.nix | 1 + hosts/knot1/services/ssh.nix | 8 ++++++++ 2 files changed, 9 insertions(+) create mode 100644 hosts/knot1/services/ssh.nix diff --git a/flake.nix b/flake.nix index aaf0920..d23dfa5 100644 --- a/flake.nix +++ b/flake.nix @@ -122,6 +122,7 @@ tangled.nixosModules.knot ./hosts/knot1/services/knot.nix ./hosts/knot1/services/nginx.nix + ./hosts/knot1/services/ssh.nix ]; target = "85.9.211.103"; }; diff --git a/hosts/knot1/services/ssh.nix b/hosts/knot1/services/ssh.nix new file mode 100644 index 0000000..9ea179b --- /dev/null +++ b/hosts/knot1/services/ssh.nix @@ -0,0 +1,8 @@ +{...}: { + services.openssh.settings = { + MaxStartups = "50:30:200"; + MaxAuthTries = 10; + LoginGraceTime = 30; + PerSourcePenaltyExemptList = "95.111.205.38"; + }; +} -- 2.51.2