What a clusterfuck
This commit is contained in:
parent
91f88b8bb2
commit
f29273be22
221 changed files with 779 additions and 956 deletions
16
modules/system/services/ssh/default.nix
Normal file
16
modules/system/services/ssh/default.nix
Normal file
|
@ -0,0 +1,16 @@
|
|||
{ ... }:
|
||||
{
|
||||
imports = [
|
||||
./fail2ban
|
||||
];
|
||||
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
settings = {
|
||||
PermitRootLogin = "no";
|
||||
PrintLastLog = "no";
|
||||
PasswordAuthentication = false;
|
||||
UsePAM = false;
|
||||
};
|
||||
};
|
||||
}
|
9
modules/system/services/ssh/fail2ban/default.nix
Normal file
9
modules/system/services/ssh/fail2ban/default.nix
Normal file
|
@ -0,0 +1,9 @@
|
|||
{ outputs, ... }:
|
||||
{
|
||||
services.fail2ban = {
|
||||
enable = true;
|
||||
maxretry = 5;
|
||||
bantime = "5m";
|
||||
ignoreIP = [ "${outputs.ips.localSpan}.0/24" ];
|
||||
};
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue