From b84cc156236ecd4fbe0c9d458e46078df625cb47 Mon Sep 17 00:00:00 2001 From: Fuwn Date: Wed, 11 Sep 2024 03:34:29 -0700 Subject: Bump: move networking module --- modules/software/networking/firewall/default.nix | 11 ----------- modules/software/networking/firewall/fail2ban.nix | 20 -------------------- 2 files changed, 31 deletions(-) delete mode 100644 modules/software/networking/firewall/default.nix delete mode 100644 modules/software/networking/firewall/fail2ban.nix (limited to 'modules/software/networking/firewall') diff --git a/modules/software/networking/firewall/default.nix b/modules/software/networking/firewall/default.nix deleted file mode 100644 index 074f398..0000000 --- a/modules/software/networking/firewall/default.nix +++ /dev/null @@ -1,11 +0,0 @@ -{ - imports = [ ./fail2ban.nix ]; - - networking.firewall = { - enable = true; - allowPing = false; - logReversePathDrops = true; - logRefusedConnections = false; - checkReversePath = "loose"; - }; -} diff --git a/modules/software/networking/firewall/fail2ban.nix b/modules/software/networking/firewall/fail2ban.nix deleted file mode 100644 index 6311b14..0000000 --- a/modules/software/networking/firewall/fail2ban.nix +++ /dev/null @@ -1,20 +0,0 @@ -{ pkgs, lib, ... }: -{ - services.fail2ban = { - enable = false; - banaction = "nftables-multiport"; - banaction-allports = lib.mkDefault "nftables-allport"; - - extraPackages = with pkgs; [ - nftables - ipset - ]; - - ignoreIP = [ - "10.0.0.0/8" - "172.16.0.0/12" - "100.64.0.0/16" - "192.168.0.0/16" - ]; - }; -} -- cgit v1.2.3