Lock update

flake.lock

@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1638553958,
-        "narHash": "sha256-leETjYMtD9y37CvfRSQhIGibcIl4dNVlFkY/8QgqmAM=",
+        "lastModified": 1639871969,
+        "narHash": "sha256-6feWUnMygRzA9tzkrfAzpA5/NBYg75bkFxnqb1DtD7E=",
         "owner": "rycee",
         "repo": "home-manager",
-        "rev": "6ce1d64073f48b9bc9425218803b1b607454c1e7",
+        "rev": "697cc8c68ed6a606296efbbe9614c32537078756",
         "type": "github"
       },
       "original": {
@@ -23,11 +23,11 @@
     },
     "nixos-unstable": {
       "locked": {
-        "lastModified": 1638806821,
-        "narHash": "sha256-v2qd2Bsmzft53s43eCbN+4ocrLksRdFLyF/MAGuWuDA=",
+        "lastModified": 1639699734,
+        "narHash": "sha256-tlX6WebGmiHb2Hmniff+ltYp+7dRfdsBxw9YczLsP60=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "bc5d68306b40b8522ffb69ba6cff91898c2fbbff",
+        "rev": "03ec468b14067729a285c2c7cfa7b9434a04816c",
         "type": "github"
       },
       "original": {
@@ -39,11 +39,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1638887115,
-        "narHash": "sha256-emjtIeqyJ84Eb3X7APJruTrwcfnHQKs55XGljj62prs=",
+        "lastModified": 1639794673,
+        "narHash": "sha256-bjauV0+Z4WmxeiHXecyiEOEwo+XysO6kx36beeatbl0=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "1bd4bbd49bef217a3d1adea43498270d6e779d65",
+        "rev": "2627c4b795107ba94562626925f5a9a2bc62ebc6",
         "type": "github"
       },
       "original": {

hosts/architect/default.nix

@@ -132,7 +132,11 @@ in {
   services = {
     zfs.autoScrub.enable = true;
     xserver.videoDrivers = [ "nvidia" ];
-    openssh.enable = true;
+    openssh = {
+      enable = true;
+      passwordAuthentication = false;
+      challengeResponseAuthentication = false;
+    };
     smartd.enable = true;
   };
 

hosts/architect/fail2ban.nix

@@ -3,23 +3,7 @@
     enable = true;
     package = pkgs.fail2ban;
     packageFirewall = pkgs.nftables;
-    banaction = "nftables-multiport";
-    banaction-allports = "nftables-allport";
     bantime-increment.enable = true;
-    #    ignoreIP = [ "10.0.0.0/24" "10.3.0.0/24" ];
-    daemonConfig = ''
-      [Definition]
-      loglevel     = INFO
-      logtarget    = SYSLOG
-      socket       = /run/fail2ban/fail2ban.sock
-      pidfile      = /run/fail2ban/fail2ban.pid
-      dbfile       = /var/lib/fail2ban/fail2ban.sqlite3
-    '';
-    jails = {
-      sshd = ''
-        maxretry = 3
-        mode     = aggressive
-      '';
-    };
+    ignoreIP = [ "10.0.0.0/24" "10.3.0.0/24" ];
   };
 }