From 508531f5ef46be788b92d68351c36dbc064728df Mon Sep 17 00:00:00 2001
From: Crony Akatsuki <crony@cronyakatsuki.xyz>
Date: Sun, 18 Jan 2026 16:55:13 +0100
Subject: [PATCH] feat: don't load allowUsers if the hostname is tyr.

---
 modules/servers/general/openssh.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/modules/servers/general/openssh.nix b/modules/servers/general/openssh.nix
index 9ac21bb..3d10858 100644
--- a/modules/servers/general/openssh.nix
+++ b/modules/servers/general/openssh.nix
@@ -2,7 +2,14 @@
   services.openssh = {
     enable = true;
     settings = {
-      AllowUsers = ["root@65.21.241.194" "root@172.16.0.2" "crony@65.21.241.194" "crony@172.16.0.2"];
+      AllowUsers =
+        lib.mkIf (config.networking.hostName != "tyr")
+        [
+          "root@65.21.241.194"
+          "root@172.16.0.2"
+          "crony@65.21.241.194"
+          "crony@172.16.0.2"
+        ];
       X11Forwarding = false;
       PasswordAuthentication = false;
     };