add geoblocking to PC openssh server config

hosts/takamaki/modules/openssh.nix

@@ -22,8 +22,7 @@
   };
 
   networking.firewall.extraCommands = ''
-    iptables -D INPUT -p tcp --dport 22 -m set ! --match-set geo-whitelist src -j DROP
-    ${pkgs.ipset}/bin/ipset destroy geo-whitelist
+    if [ "$(iptables -S INPUT)" != "-P INPUT ACCEPT" ]; then iptables -D INPUT -p tcp --dport 22 -m set ! --match-set geo-whitelist src -j DROP; ${pkgs.ipset}/bin/ipset destroy geo-whitelist; fi
     ${pkgs.ipset}/bin/ipset restore -file /home/grey/nixos/assets/geo-whitelist.ipset
     iptables -I INPUT -p tcp --dport 22 -m set ! --match-set geo-whitelist src -j DROP
   '';