usecases/server/fail2ban.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

inputs:

{ config, ... }:

{
  services.fail2ban = {
    enable = true;
    ignoreIP = [ config.topology.mainVpn.subnet ];

    bantime-increment.enable = true;

    jails = {
      recidive.settings = {
        banaction = "%(banaction_allports)s";
        bantime = "1w";
        findtime = "1d";
      };
    };
  };
}