albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Add fail2ban

Browse source
This commit is contained in:
iFargle 2023-07-04 15:37:53 +09:00
parent 8fd0ef1397
commit 1d4f2475bf
3 changed files with 13 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
configuration.nix
View file

@ -13,14 +13,16 @@
{ lib, config, pkgs, ... }: { { lib, config, pkgs, ... }: {
imports = imports =
[ [
# Gnome configuration file. # Desktop Environments
./desktops/gnome.nix ./desktops/gnome.nix
# Default configuration for Firefox
# Software
./software/firefox.nix ./software/firefox.nix
# Enable OpenSSH
# Services
./services/openssh.nix ./services/openssh.nix
# Promtail logging
./services/promtail.nix ./services/promtail.nix
./services/fail2ban.nix
]; ];
# Keep the system up-to-date automatically # Keep the system up-to-date automatically
@ -154,6 +156,7 @@
tailscale tailscale
neofetch neofetch
gnupg gnupg
fail2ban
]; ];
# Enable various system services # Enable various system services

5
services/fail2ban.nix Normal file
View file

@ -0,0 +1,5 @@
{ config, pkgs, ... }: {
services.fail2ban = {
enable = true;
};
}

1
services/openssh.nix
View file

@ -2,6 +2,7 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
logLevel = "VERBOSE"; # Used for fail2ban monitoring
settings.PermitRootLogin = "no"; settings.PermitRootLogin = "no";
settings.PasswordAuthentication = "true"; # Set this to false when keys are configured settings.PasswordAuthentication = "true"; # Set this to false when keys are configured
banner = '' banner = ''