From 81068577fa7f08e7cc88aa9413245896bb494914 Mon Sep 17 00:00:00 2001
From: cubernetes <timo42@proton.me>
Date: Sat, 3 Oct 2026 17:15:15 +0200
Subject: [PATCH] Add openssh config

---
 hosts/fw/configuration.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/hosts/fw/configuration.nix b/hosts/fw/configuration.nix
index 7b36b46..45d7590 100644
--- a/hosts/fw/configuration.nix
+++ b/hosts/fw/configuration.nix
@@ -460,6 +460,18 @@ with lib;
 
   documentation.dev.enable = true;
 
+  services.openssh = {
+      enable = true;
+      openFirewall = true;
+      settings = {
+          PasswordAuthentication = true;
+          KbdInteractiveAuthentication = false;
+          PermitRootLogin = "no";
+          AllowUsers = [ "tsi" ];
+          MaxAuthTries = 30;
+      };
+  };
+
   services.power-profiles-daemon.enable = true;
 
   environment.localBinInPath = true;