nixos-config/sys/machines/rackserv/fail2ban.nix
2025-06-01 13:00:31 +02:00

12 lines
216 B
Nix

{
services.fail2ban = {
enable = true;
ignoreIP = ["100.64.0.0/10"]; # tailscale
bantime = "1h";
bantime-increment = {
enable = true;
maxtime = "168h";
factor = "4";
};
};
}