k/nixos_configs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

port and fail2ban update

Browse source
This commit is contained in:
k 2026-05-10 15:42:33 -04:00
parent 37d2d2c2d6
commit 6e69171320
1 changed files with 40 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

43
hosts/server/service.nix
View file

@ -6,8 +6,8 @@
networking = {
firewall = {
enable = true;
allowedTCPPorts = [80 443 22 25565 26615 8080 53 19132];
allowedUDPPorts = [26615 8080 1900 51820 53 19132];
allowedTCPPorts = [80 443 51820 2020 26615];
allowedUDPPorts = [51820 24454 26615];
};
nat.externalInterface = "wlp0s20f3";
nat.internalInterfaces = ["wg0"];
@ -54,7 +54,44 @@
jellyfin = {enable = true;};
fail2ban = {enable = true;};
fail2ban = {
enable = true;
jails = {
nginx-http-auth = {
settings = {
enabled = true;
port = "http,https";
logpath = "/var/log/nginx/error.log";
# "auto" or "polling" is required for file-based logs on NixOS
backend = "auto";
};
};
nginx-botsearch = {
settings = {
enabled = true;
port = "http,https";
logpath = "/var/log/nginx/access.log";
backend = "auto";
maxretry = 2;
};
};
recidive = {
settings = {
enabled = true;
port = "allports";
protocol = "all";
# Look for 'Ban' messages in fail2ban's own log
backend = "systemd";
#logpath = "/var/log/fail2ban.log";
#backend = "auto";
bantime = "1w"; # Ban for 1 week
findtime = "1d"; # Look back 1 day
maxretry = 5; # If they were banned 5 times in 24 hours
};
};
};
};
postgresql = {enable = true;};