From 667a10b82a882b4e74c338fdf7751c003e1a2dbe Mon Sep 17 00:00:00 2001
From: ediblerope <fredrik@nordhammer.it>
Date: Tue, 20 Jan 2026 13:31:23 +0000
Subject: [PATCH] Update FredOS-Mediaserver.nix

---
 hosts/FredOS-Mediaserver.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/hosts/FredOS-Mediaserver.nix b/hosts/FredOS-Mediaserver.nix
index 6aef254..f52a2cb 100644
--- a/hosts/FredOS-Mediaserver.nix
+++ b/hosts/FredOS-Mediaserver.nix
@@ -77,11 +77,16 @@
   };
 
   # Open firewall for web traffic
-  networking.firewall.allowedTCPPorts = [ 80 443 81 ];  # 81 is NPM admin interface
+  networking.firewall.allowedTCPPorts = [ 80 443 81 22 ];  # 81 is NPM admin interface
 
   # Basic networking
   networking.useDHCP = lib.mkDefault true;
 
+  services.openssh = {
+    enable = true;
+    settings.PermitRootLogin = "no";
+  };
+
   # Boot loader
   boot.loader.grub.enable = true;
   boot.loader.grub.device = "/dev/sdc";