From 8b5e5079e5fd00eadf2e3926c104e4ecf99a5779 Mon Sep 17 00:00:00 2001 From: Fuwn Date: Wed, 4 Sep 2024 19:57:20 -0700 Subject: refac --- modules/system/networking/fail2ban.nix | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 modules/system/networking/fail2ban.nix (limited to 'modules/system/networking/fail2ban.nix') diff --git a/modules/system/networking/fail2ban.nix b/modules/system/networking/fail2ban.nix new file mode 100644 index 0000000..fa45565 --- /dev/null +++ b/modules/system/networking/fail2ban.nix @@ -0,0 +1,18 @@ +{ lib, config, ... }: +{ + services.fail2ban = { + enable = false; + + ignoreIP = [ + "10.0.0.0/8" + "172.16.0.0/12" + "192.168.0.0/16" + ]; + + jails.sshd.settings = { + enabled = true; + filter = "sshd[mode=aggressive]"; + port = lib.strings.concatStringsSep "," (map toString config.services.openssh.ports); + }; + }; +} -- cgit v1.2.3