From 6ed3076f2a9ad779cf6d416249602041bea8a810 Mon Sep 17 00:00:00 2001
From: Karol Babioch <kbabioch@suse.de>
Date: Nov 12 2019 14:35:39 +0000
Subject: Remove SSH service from public zone


This removes the SSH service from the public zone, so that it will no
longer be possible for everyone to connect to this machine using SSH.
Only trusted IPs / networks (see above) will be allowed.

---

diff --git a/pillar/id/slimhat_infra_opensuse_org.sls b/pillar/id/slimhat_infra_opensuse_org.sls
index fd31347..e8610f8 100644
--- a/pillar/id/slimhat_infra_opensuse_org.sls
+++ b/pillar/id/slimhat_infra_opensuse_org.sls
@@ -59,8 +59,6 @@ firewalld:
     # interface or sources and without any service declared.
     public:
       short: Public
-      services:
-        - ssh
     internal:
       short: Internal
     work: