modules/common: Setup fail2ban

peterablehmann · Jun 9, 2024 · 40e2b75 · 40e2b75
1 parent e1946ca
commit 40e2b75
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/modules/common/default.nix b/modules/common/default.nix
@@ -11,6 +11,7 @@
     ./backup.nix
     ./boot.nix
     ./exporters.nix
+    ./fail2ban.nix
     ./nginx.nix
     ./nix.nix
     ./ssh.nix

diff --git a/modules/common/fail2ban.nix b/modules/common/fail2ban.nix
@@ -0,0 +1,12 @@
+{
+  services.fail2ban = {
+    enable = true;
+    bantime = "1h";
+    bantime-increment = {
+      enable = true;
+      overalljails = true;
+      factor = "4";
+      maxtime = "1y";
+    };
+  };
+}