helm/profiles/server/default.nix

7 lines
195 B
Nix

{ config, ... }:
{
services.openssh.enable = true;
networking.firewall.allowedTCPPorts = [ 80 433 22 ]; # ssh and website
security.sudo.wheelNeedsPassword = false; # needed for deploy-rs
}