bicep/sshguard: disable
All checks were successful
Build topology graph / evals (push) Successful in 4m5s
Eval nix flake / evals (push) Successful in 7m41s

sshguard doesn't actually work as it currently stands, also the builtin
PerSourcePenalty functionality in SSH is more aggressive than sshguard
is able to catch anyway. It might've been reasonable if we were using it
for anything other than SSH, but it doesn't seem like we are.
This commit is contained in:
2026-01-21 11:13:25 +09:00
parent 0f11cca8ec
commit 93cf6f4a63

View File

@@ -44,7 +44,6 @@
# Enable the OpenSSH daemon.
services.openssh.enable = true;
services.sshguard.enable = true;
# Do not change, even during upgrades.
# See https://search.nixos.org/options?show=system.stateVersion