home: allow ssh through firewall if no trusted interfaces set
1 file changed, 10 insertions(+), 2 deletions(-)
changed files
M system/roles/home.nix → system/roles/home.nix
@@ -1,5 +1,13 @@ -{ ... }: +{ + config, + lib, + ... +}: { networking.domain = "home.arpa"; - services.openssh.openFirewall = false; + + services.openssh.openFirewall = lib.mkDefault ( + # default to open for new machines until firewall is fully configured + builtins.length config.networking.firewall.trustedInterfaces == 0 + ); }