Lander Van den Bulcke
58d372fe97
Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>
23 lines
448 B
Nix
23 lines
448 B
Nix
{ pkgs, ... }:
|
|
{
|
|
environment.etc = {
|
|
"fail2ban/filter.d/nginx-bruteforce.conf".text = ''
|
|
[Definition]
|
|
failregex = ^<HOST>.*GET.*(matrix/server|\.php|admin|wp\-).* HTTP/\d.\d\" 404.*$
|
|
'';
|
|
};
|
|
|
|
services.fail2ban = {
|
|
enable = true;
|
|
|
|
ignoreIP = [
|
|
"100.64.0.0/24" # tailnet
|
|
];
|
|
|
|
maxretry = 3;
|
|
bantime = "2h";
|
|
|
|
extraPackages = [ pkgs.ipset ];
|
|
banaction = "iptables-ipset-proto6-allports";
|
|
};
|
|
}
|