Classic CERT.LV moment

hosts/default/configuration.nix

@@ -70,12 +70,12 @@
 			splix
 			hplip
 		];
-		webInterface = true;
+		webInterface = false;
 		listenAddresses = [ "*:631" ];
-		allowFrom = [ "all" ];
-		browsing = true;
-		defaultShared = true;
-		openFirewall = true;
+		allowFrom = [ "localhost" ];
+		browsing = false;
+		defaultShared = false;
+		openFirewall = false;
 	};
 
 	programs.virt-manager.enable = true;

hosts/server/configuration.nix

@@ -15,7 +15,11 @@
 
 	virtualisation.docker.enable = true;
 
-	networking.firewall.allowedTCPPorts = [ 22 ];
+	networking.firewall = {
+		enable = true;
+		allowedTCPPorts = [ 8080 443 25565 ];
+		allowedUDPPorts = [  ];
+	}
 
 	catppuccin = {
 		enable = true;

modules/nixos/programs.nix

@@ -40,7 +40,8 @@
 
 	services.openssh = {
 		enable = true;
-		banner = "please fuck off\n";
+		ports = [ ];
+		banner = "bro fuck off";
 	};
 
 	security.sudo.enable =  true;