From e0b6239ab68fe6b5f3643ff4e6f13c13d79325b0 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Sun, 11 Jan 2026 14:14:01 +0100
Subject: [PATCH] nebula/sshd: Hardcode port 22

---
 modules/system/services/nebula/sshd.nix | 16 +++++-----------
 1 file changed, 5 insertions(+), 11 deletions(-)

diff --git a/modules/system/services/nebula/sshd.nix b/modules/system/services/nebula/sshd.nix
index eba37e7..8ce7ed0 100644
--- a/modules/system/services/nebula/sshd.nix
+++ b/modules/system/services/nebula/sshd.nix
@@ -8,18 +8,12 @@ let
   cfg = config.custom.services.nebula.node;
 in
 {
-  options.custom.services.nebula.node.sshd = {
-    enable = lib.mkEnableOption "" // {
-      default = true;
-    };
-    port = lib.mkOption {
-      type = lib.types.port;
-      default = 22;
-    };
+  options.custom.services.nebula.node.sshd.enable = lib.mkEnableOption "" // {
+    default = true;
   };
 
   config = lib.mkIf (cfg.enable && cfg.sshd.enable) {
-    meta.ports.tcp = [ cfg.sshd.port ];
+    meta.ports.tcp = [ 22 ];
 
     services = {
       openssh = {
@@ -28,7 +22,7 @@ in
         ports = [ ];
         listenAddresses = lib.singleton {
           addr = cfg.address;
-          inherit (cfg.sshd) port;
+          port = 22;
         };
         settings = {
           PasswordAuthentication = false;
@@ -41,7 +35,7 @@ in
         config.custom.services.nebula.peers
         |> lib.filter (node: node.isClient)
         |> lib.map (nebula: {
-          inherit (cfg.sshd) port;
+          port = 22;
           proto = "tcp";
           host = nebula.name;
         });