Add fail2ban to server hosts

2024-05-22 07:48:45 +01:00 · 2024-05-22 07:48:45 +01:00 · 8bc751926c
commit 8bc751926c
parent d8464519ba
1 changed files with 13 additions and 0 deletions
--- a/hosts/server.nix
+++ b/hosts/server.nix
@ -41,6 +41,19 @@
    };
  };

+  services.fail2ban = {
+    enable = true;
+    bantime = "1h";
+    bantime-increment = {
+      enable = true;
+      maxtime = "24h";
+      rndtime = "7m";
+    };
+    ignoreIP = [
+      "100.64.0.0/10"
+    ];
+  };
+
  modules.networking.tailscale = {
    enable = true;
    restrictSSH = false;