From 7047b6a9edada15632f82efa2d1e2bffe6817ffe Mon Sep 17 00:00:00 2001
From: Noratrieb <48135649+Noratrieb@users.noreply.github.com>
Date: Mon, 12 Aug 2024 01:42:11 +0200
Subject: [PATCH] prepare for fakessh

---
 newinfra/nix/hive.nix                    | 24 +++++++++++++++++++++++-
 newinfra/nix/modules/default/default.nix |  2 +-
 2 files changed, 24 insertions(+), 2 deletions(-)

diff --git a/newinfra/nix/hive.nix b/newinfra/nix/hive.nix
index d9e66a3..ed1d252 100644
--- a/newinfra/nix/hive.nix
+++ b/newinfra/nix/hive.nix
@@ -15,6 +15,7 @@
       slides = fetchTarball "https://github.com/Noratrieb/slides/archive/0401f35c22b124b69447655f0c537badae9e223c.tar.gz";
 
       pretense = import (fetchTarball "https://github.com/Noratrieb/pretense/archive/270b01fc1118dfd713c1c41530d1a7d98f04527d.tar.gz");
+      fakessh = import (fetchTarball "https://github.com/Noratrieb/fakessh/archive/7a129eba2e0bd15d46efce2f2e0daebeb6888bec.tar.gz");
 
       networkingConfig = {
         dns1 = {
@@ -242,7 +243,7 @@
     '';
   };
   # VPS5 is the primary test server, where new things are being deployed that could break stuff maybe.
-  vps5 = { name, nodes, modulesPath, config, pkgs, ... }: {
+  vps5 = { name, nodes, modulesPath, config, pkgs, lib, fakessh, ... }: {
     imports = [
       (modulesPath + "/profiles/qemu-guest.nix")
       ./modules/contabo
@@ -251,6 +252,27 @@
       ./modules/garage
     ];
 
+    # services.openssh.ports = [ 2000 ];
+    #systemd.services.fakessh = {
+    #  description = "fakessh ssh honeypot";
+    #  wantedBy = [ "multi-user.target" ];
+    #  after = [ "network.target" ];
+    #  serviceConfig = {
+    #    DynamicUser = true;
+    #    ExecStart = "${lib.getExe (fakessh {inherit pkgs;})}";
+    #    AmbientCapabilities = "CAP_NET_BIND_SERVICE";
+    #    # i really don't trust this.
+    #    MemoryHigh = "100;";
+    #    MemoryMax = "200M";
+    #    Environment = [
+    #      "FAKESSH_LISTEN_ADDR=0.0.0.0:22"
+    #      "RUST_LOG=debug"
+    #    ];
+    #  };
+    #};
+    # networking.firewall.allowedTCPPorts = [ 22 ];
+    #deployment.targetPort = 2000;
+
     deployment.tags = [ "eu" "apps" ];
     system.stateVersion = "23.11";
   };
diff --git a/newinfra/nix/modules/default/default.nix b/newinfra/nix/modules/default/default.nix
index 71147ea..024fc2e 100644
--- a/newinfra/nix/modules/default/default.nix
+++ b/newinfra/nix/modules/default/default.nix
@@ -49,7 +49,7 @@
       ];
     };
   };
-  networking.firewall.allowedTCPPorts = [ 2 3306 5432 1521 ];
+  networking.firewall.allowedTCPPorts = [ 23 3306 5432 1521 ];
 
   # monitoring