aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

Make fail2ban defaults less forgiving

Browse source
This commit is contained in:
Henrik Lissner 2021-01-30 04:41:21 -05:00
parent 24d5a426f5
commit d380e06cba
2 changed files with 12 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
modules/services/fail2ban.nix
View file

@ -12,11 +12,18 @@ in {
services.fail2ban = {
enable = true;
ignoreIP = [ "127.0.0.1/16" "192.168.1.0/24" ];
jails.DEFAULT = ''
blocktype = DROP
bantime = 7200
findtime = 7200
'';
banaction-allports = "iptables-allports";
jails = {
DEFAULT = ''
blocktype = DROP
bantime = 6h
findtime = 15m
'';
sshd = ''
bantime = 24h
findtime = 1h
'';
};
};
# Extra filters

2
modules/services/gitea.nix
View file

@ -35,8 +35,6 @@ in {
enabled = true
filter = gitea
logpath = ${config.services.gitea.log.rootPath}/gitea.log
bantime = 1800
findtime = 3600
banaction = %(banaction_allports)s
'';