From ab06d1cd703dd1e9bfd093b84e2218496b286134 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Tue, 25 Aug 2026 18:18:54 +0200
Subject: tower: expose ssh over tailscale on port 22

---
 hosts/tower/ssh.nix | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

(limited to 'hosts/tower/ssh.nix')

diff --git a/hosts/tower/ssh.nix b/hosts/tower/ssh.nix
index 13da162..46e872b 100644
--- a/hosts/tower/ssh.nix
+++ b/hosts/tower/ssh.nix
@@ -2,7 +2,10 @@
 {
   services.openssh = {
     enable = true;
-    ports = [ 52222 ];
+    ports = [
+      52222
+      22
+    ];
     settings = {
       PermitRootLogin = "no";
       PasswordAuthentication = false;
@@ -12,5 +15,8 @@
     };
   };
 
-  networking.firewall.allowedTCPPorts = [ 52222 ];
+  networking.firewall.interfaces = {
+    eno1.allowedTCPPorts = [ 52222 ];
+    tailscale0.allowedTCPPorts = [ 22 ];
+  };
 }
-- 
cgit v1.3.1