diff options
Diffstat (limited to 'modules/nixos/fail2ban.nix')
-rw-r--r-- | modules/nixos/fail2ban.nix | 37 |
1 files changed, 0 insertions, 37 deletions
diff --git a/modules/nixos/fail2ban.nix b/modules/nixos/fail2ban.nix deleted file mode 100644 index a0cc2b4..0000000 --- a/modules/nixos/fail2ban.nix +++ /dev/null @@ -1,37 +0,0 @@ -{ - config, - lib, - this, - ... -}: -with lib; -let - cfg = config.nixfiles.modules.fail2ban; -in -{ - options.nixfiles.modules.fail2ban.enable = mkEnableOption "fail2ban"; - - config = mkIf cfg.enable { - ark.directories = [ "/var/lib/fail2ban" ]; - - services.fail2ban = { - enable = true; - - bantime-increment = { - enable = true; - maxtime = "24h"; - rndtime = "8m"; - }; - - ignoreIP = optionals (hasAttr "wireguard" this) ( - with config.nixfiles.modules.wireguard; - [ - ipv4.subnet - ipv6.subnet - ] - ); - - jails.DEFAULT.settings.blocktype = "DROP"; - }; - }; -} |