fsagbuya
/
it-infra
forked from M-Labs/it-infra
1
0
Fork 0
Code Pull Requests Activity

nixbld: ignore local IP for fail2ban

This commit is contained in:
Sebastien Bourdeauducq 2022-12-24 15:42:35 +08:00
parent 755bfaf593
commit 3b224c56aa
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
nixbld-etc-nixos/configuration.nix
View File

@ -52,6 +52,7 @@ in
security.apparmor.enable = true; security.apparmor.enable = true;
services.fail2ban.enable = true; services.fail2ban.enable = true;
services.fail2ban.ignoreIP = [ "42.200.147.171" "2001:470:18:629::2" ];
services.fail2ban.maxretry = 9; services.fail2ban.maxretry = 9;
services.fail2ban.bantime-increment.enable = true; services.fail2ban.bantime-increment.enable = true;
services.fail2ban.jails.sshd = services.fail2ban.jails.sshd =