From b66b445553c127afaafecad45518ad7306efc195 Mon Sep 17 00:00:00 2001
From: Tim Schubert <dadada@dadada.li>
Date: Mon, 1 Jul 2024 14:32:48 +0200
Subject: [PATCH] feat: move SSH to non-default port

---
 nixos/modules/gitea.nix         | 5 +++++
 nixos/modules/profiles/base.nix | 2 ++
 2 files changed, 7 insertions(+)

diff --git a/nixos/modules/gitea.nix b/nixos/modules/gitea.nix
index f73ddc0..0c808bc 100644
--- a/nixos/modules/gitea.nix
+++ b/nixos/modules/gitea.nix
@@ -37,6 +37,11 @@ in
           LANDING_PAGE = "explore";
           OFFLINE_MODE = true;
           DISABLE_SSH = false;
+
+          # Use built-in SSH server
+          START_SSH_SERVER = true;
+          SSH_PORT = 22;
+
           DOMAIN = "git.dadada.li";
         };
         picture = {
diff --git a/nixos/modules/profiles/base.nix b/nixos/modules/profiles/base.nix
index 9c78ed7..fdeb0ee 100644
--- a/nixos/modules/profiles/base.nix
+++ b/nixos/modules/profiles/base.nix
@@ -50,5 +50,7 @@ in
 
   programs.zsh.enable = mkDefault true;
 
+  # Avoid some bots
+  services.openssh.ports = [ 2222 ];
 }