Make fail2ban defaults less forgiving
This commit is contained in:
		
							parent
							
								
									24d5a426f5
								
							
						
					
					
						commit
						d380e06cba
					
				|  | @ -12,11 +12,18 @@ in { | |||
|     services.fail2ban = { | ||||
|       enable = true; | ||||
|       ignoreIP = [ "127.0.0.1/16" "192.168.1.0/24" ]; | ||||
|       jails.DEFAULT = '' | ||||
|         blocktype = DROP | ||||
|         bantime = 7200 | ||||
|         findtime = 7200 | ||||
|       ''; | ||||
|       banaction-allports = "iptables-allports"; | ||||
|       jails = { | ||||
|         DEFAULT = '' | ||||
|           blocktype = DROP | ||||
|           bantime = 6h | ||||
|           findtime = 15m | ||||
|         ''; | ||||
|         sshd = '' | ||||
|           bantime = 24h | ||||
|           findtime = 1h | ||||
|         ''; | ||||
|       }; | ||||
|     }; | ||||
| 
 | ||||
|     # Extra filters | ||||
|  |  | |||
|  | @ -35,8 +35,6 @@ in { | |||
|       enabled = true | ||||
|       filter = gitea | ||||
|       logpath = ${config.services.gitea.log.rootPath}/gitea.log | ||||
|       bantime = 1800 | ||||
|       findtime = 3600 | ||||
|       banaction = %(banaction_allports)s | ||||
|     ''; | ||||
| 
 | ||||
|  |  | |||
		Loading…
	
		Reference in a new issue