modules: services: calibre-web: add fail2ban jail

2023-02-19 18:36:52 +01:00 · 2023-02-19 18:36:52 +01:00 · 2485a60d62
parent b9f6c5d534
commit 2485a60d62
1 changed files with 16 additions and 0 deletions
--- a/modules/services/calibre-web/default.nix
+++ b/modules/services/calibre-web/default.nix
@ -53,5 +53,21 @@ in
        cfg.libraryPath
      ];
    };
+
+    services.fail2ban.jails = {
+      calibre-web = ''
+        enabled = true
+        filter = calibre-web
+        port = http,https
+      '';
+    };
+
+    environment.etc = {
+      "fail2ban/filter.d/calibre-web.conf".text = ''
+        [Definition]
+        failregex = ^.*Login failed for user ".*" IP-address: <HOST>$
+        journalmatch = _SYSTEMD_UNIT=calibre-web.service
+      '';
+    };
  };
 }