forked from lukas/nixos-config
40 lines
771 B
Nix
40 lines
771 B
Nix
{
|
|
services.fail2ban = {
|
|
enable = true;
|
|
# jails = {
|
|
# lldap = {
|
|
# settings = {
|
|
# enabled = true;
|
|
# filter = "lldap";
|
|
# backend = "systemd";
|
|
# journalmatch = "_SYSTEMD_UNIT=lldap.service";
|
|
# maxretry = 5;
|
|
# findtime = 600;
|
|
# bantime = 3600;
|
|
# };
|
|
# };
|
|
# };
|
|
|
|
# jails = {
|
|
# traefik-auth = ''
|
|
# enabled = true
|
|
# filter = traefik-auth
|
|
# backend = systemd
|
|
# journalmatch = _SYSTEMD_UNIT=traefik.service
|
|
# maxretry = 3
|
|
# bantime = 30
|
|
# findtime = 600
|
|
# '';
|
|
# };
|
|
#
|
|
# filters = {
|
|
# traefik-auth = {
|
|
# definition = ''
|
|
# [Definition]
|
|
# failregex = ^<HOST> -.*"(GET|POST).*" 401
|
|
# ignoreregex =
|
|
# '';
|
|
# };
|
|
# };
|
|
};
|
|
}
|