summaryrefslogtreecommitdiff
path: root/modules/nixos/fail2ban.nix
diff options
context:
space:
mode:
authorAzat Bahawi <azat@bahawi.net>2024-04-21 02:15:42 +0300
committerAzat Bahawi <azat@bahawi.net>2024-04-21 02:15:42 +0300
commite6ed60548397627bf10f561f9438201dbba0a36e (patch)
treef9a84c5957d2cc4fcd148065ee9365a0c851ae1c /modules/nixos/fail2ban.nix
parent9ac64328603d44bd272175942d3ea3eaadcabd04 (diff)
2024-04-21
Diffstat (limited to 'modules/nixos/fail2ban.nix')
-rw-r--r--modules/nixos/fail2ban.nix37
1 files changed, 0 insertions, 37 deletions
diff --git a/modules/nixos/fail2ban.nix b/modules/nixos/fail2ban.nix
deleted file mode 100644
index a0cc2b4..0000000
--- a/modules/nixos/fail2ban.nix
+++ /dev/null
@@ -1,37 +0,0 @@
-{
- config,
- lib,
- this,
- ...
-}:
-with lib;
-let
- cfg = config.nixfiles.modules.fail2ban;
-in
-{
- options.nixfiles.modules.fail2ban.enable = mkEnableOption "fail2ban";
-
- config = mkIf cfg.enable {
- ark.directories = [ "/var/lib/fail2ban" ];
-
- services.fail2ban = {
- enable = true;
-
- bantime-increment = {
- enable = true;
- maxtime = "24h";
- rndtime = "8m";
- };
-
- ignoreIP = optionals (hasAttr "wireguard" this) (
- with config.nixfiles.modules.wireguard;
- [
- ipv4.subnet
- ipv6.subnet
- ]
- );
-
- jails.DEFAULT.settings.blocktype = "DROP";
- };
- };
-}