Infinidoge/universe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

global/security: add global fail2ban options

Browse source
This commit is contained in:
Infinidoge 2024-04-15 02:28:10 -04:00
parent 0a48d8dc60
commit 5e56eaa90e
Signed by: Infinidoge
SSH key fingerprint: SHA256:VEv3zmkBzcYYle6/37h+BbOyNDbGy/o8SHh7fcs9RbQ
1 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
modules/global/security.nix
View file

@ -68,6 +68,22 @@ with lib;
recommendedProxySettings = true;
};
services.fail2ban = {
ignoreIP = [
"100.101.102.0/14"
"172.16.0.0/12"
"192.168.1.0/24"
"192.168.137.0/24"
];
bantime = "24h";
bantime-increment = {
enable = true;
multipliers = "1 2 4 8 16 32 64";
maxtime = "168h"; # Do not ban for more than 1 week
overalljails = true; # Calculate the bantime based on all the violations
};
};
common = {
nginx = rec {
ssl-cert = {