[k] Enable fail2ban

gmacon · Jul 19, 2024 · 0001dc0 · 0001dc0
1 parent 9a3fb8c
commit 0001dc0
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/potassium/configuration.nix b/potassium/configuration.nix
@@ -1,10 +1,15 @@
-{ config, ... }: {
+{ config, pkgs, ... }: {
   system.stateVersion = "23.11";
   fileSystems."/srv" = {
     device = "/dev/disk/by-id/scsi-0DO_Volume_volume-nyc3-01";
     options = [ "discard" "nofail" "noatime" ];
   };
   services.openssh.ports = [ 46409 ];
+  services.fail2ban = {
+    enable = true;
+    banaction = "iptables-ipset";
+    extraPackages = [ pkgs.ipset ];
+  };
 
   # Backups
   age.secrets.tarsnapKey.file = ../secrets/tarsnap-k.key.age;