william/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fail2ban: fix config; forgejo: repository path and persistency

Browse source
This commit is contained in:
William 2025-11-09 16:57:17 -03:00
parent 5906fa6f36
commit ae6d46012b
3 changed files with 25 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

20
hosts/trantor/fail2ban.nix
View file

@ -12,7 +12,6 @@
"192.168.0.0/16"
"100.64.0.0/10"
];
bantime = "1h";
bantime-increment = {
enable = true;
@ -20,24 +19,5 @@
maxtime = "10000h";
overalljails = true;
};
jails.forgejo = {
settings = {
enabled = true;
filter = "forgejo";
backend = "systemd";
maxretry = 10;
findtime = "1h";
bantime = "15m";
};
};
};
# Custom fail2ban filter for Forgejo using systemd journal
environment.etc."fail2ban/filter.d/forgejo.local".text = pkgs.lib.mkDefault (pkgs.lib.mkAfter ''
[Definition]
journalmatch = _SYSTEMD_UNIT=forgejo.service
failregex = Failed authentication attempt for .+ from <HOST>:\d+:
ignoreregex =
'');
}