xun/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fail2ban on rackserv

Browse source
This commit is contained in:
xunuwu 2025-06-01 12:30:22 +02:00
parent a1dc18d3c8
commit 85962b9344
Signed by: xun
SSH key fingerprint: SHA256:Uot/1WoAjWAeqLOHA5vYy4phhVydsH7jCPmBjaPZfgI
2 changed files with 13 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
sys/machines/rackserv/default.nix
View file

@ -1,10 +1,6 @@
{ {
lib,
pkgs,
inputs, inputs,
systemProfiles, systemProfiles,
specialArgs,
self,
... ...
}: { }: {
imports = imports =
@ -13,6 +9,7 @@
inputs.impermanence.nixosModules.impermanence inputs.impermanence.nixosModules.impermanence
inputs.disko.nixosModules.disko inputs.disko.nixosModules.disko
./disk-config.nix ./disk-config.nix
./fail2ban.nix
] ]
++ (map (x: systemProfiles + x) [ ++ (map (x: systemProfiles + x) [
/core/security.nix /core/security.nix

12
sys/machines/rackserv/fail2ban.nix Normal file
View file

@ -0,0 +1,12 @@
{
services.fail2ban = {
enable = true;
ignoreIP = ["100.64.0.0/10"]; # tailscale
bantime = "1h";
bantime-increment = {
enable = true;
maxtime = "168h";
factor = "4";
};
};
}