14 lines
301 B
Nix
14 lines
301 B
Nix
{
|
|
services.openssh.startWhenNeeded = false; # i dont think this works with fail2ban
|
|
|
|
services.fail2ban = {
|
|
enable = true;
|
|
ignoreIP = ["100.64.0.0/10"]; # tailscale
|
|
bantime = "1h";
|
|
bantime-increment = {
|
|
enable = true;
|
|
maxtime = "168h";
|
|
factor = "4";
|
|
};
|
|
};
|
|
}
|