aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

Make fail2ban defaults less forgiving

Browse source
This commit is contained in:
Henrik Lissner 2021-01-30 04:41:21 -05:00
parent 24d5a426f5
commit d380e06cba
2 changed files with 12 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
modules/services/fail2ban.nix
View file

@ -12,11 +12,18 @@ in {
services.fail2ban = { services.fail2ban = {
enable = true; enable = true;
ignoreIP = [ "127.0.0.1/16" "192.168.1.0/24" ]; ignoreIP = [ "127.0.0.1/16" "192.168.1.0/24" ];
jails.DEFAULT = '' banaction-allports = "iptables-allports";
jails = {
DEFAULT = ''
blocktype = DROP blocktype = DROP
bantime = 7200 bantime = 6h
findtime = 7200 findtime = 15m
''; '';
sshd = ''
bantime = 24h
findtime = 1h
'';
};
}; };
# Extra filters # Extra filters

2
modules/services/gitea.nix
View file

@ -35,8 +35,6 @@ in {
enabled = true enabled = true
filter = gitea filter = gitea
logpath = ${config.services.gitea.log.rootPath}/gitea.log logpath = ${config.services.gitea.log.rootPath}/gitea.log
bantime = 1800
findtime = 3600
banaction = %(banaction_allports)s banaction = %(banaction_allports)s
''; '';