fix(fail2ban): more strict rules

2024-08-30 13:37:05 +02:00 · 2024-08-30 13:37:05 +02:00 · 7a59ec63a1
commit 7a59ec63a1
parent fe73620ee3
1 changed files with 8 additions and 0 deletions
--- a/fail2ban.nix
+++ b/fail2ban.nix
@ -1,5 +1,13 @@
 {
  services.fail2ban = {
    enable = true;
+    bantime-increment = {
+      enable = true;
+    };
+    ignoreIP = [
+      # Saint-Etinne
+      "92.159.247.205"
+    ];
+    jails.sshd.settings.findtime = 600; # 600sec = 10 minutes
  };
 }