Add fail2ban
This commit is contained in:
parent
501757dd10
commit
fbcf829d8c
3 changed files with 10 additions and 0 deletions
|
@ -33,4 +33,6 @@
|
|||
listenAddress = (import ../utils/getInternalIP.nix config).listenIP;
|
||||
};
|
||||
# boot.kernel.sysctl."kernel.perf_event_paranoid" = 0; # for the perf exporter
|
||||
|
||||
nix.buildCores = 0;
|
||||
}
|
||||
|
|
|
@ -3,5 +3,6 @@
|
|||
imports = [
|
||||
./services/nginx.nix
|
||||
./services/acme.nix
|
||||
./services/fail2ban.nix
|
||||
];
|
||||
}
|
||||
|
|
7
config/services/fail2ban.nix
Normal file
7
config/services/fail2ban.nix
Normal file
|
@ -0,0 +1,7 @@
|
|||
{ ... }: {
|
||||
services.fail2ban = {
|
||||
enable = true;
|
||||
bantime-increment.enable = true;
|
||||
bantime-increment.maxtime = "48h";
|
||||
};
|
||||
}
|
Loading…
Reference in a new issue