tower: expose ssh over tailscale on port 22

1 files changed, 8 insertions, 2 deletions

diff --git a/hosts/tower/ssh.nix b/hosts/tower/ssh.nix
index 13da162..46e872b 100644
--- a/hosts/tower/ssh.nix
+++ b/hosts/tower/ssh.nix
@@ -2,7 +2,10 @@
 {
   services.openssh = {
     enable = true;
-    ports = [ 52222 ];
+    ports = [
+      52222
+      22
+    ];
     settings = {
       PermitRootLogin = "no";
       PasswordAuthentication = false;
@@ -12,5 +15,8 @@
     };
   };
 
-  networking.firewall.allowedTCPPorts = [ 52222 ];
+  networking.firewall.interfaces = {
+    eno1.allowedTCPPorts = [ 52222 ];
+    tailscale0.allowedTCPPorts = [ 22 ];
+  };
 }