WIP: FINISH SETTING UP FAIL2BAN

2024-08-22 23:56:53 +02:00 · 2024-08-22 23:56:53 +02:00 · 771da4b137
parent 1fc8790790
commit 771da4b137
1 changed files with 16 additions and 0 deletions
--- a/modules/nixos/services/pdf-edit/default.nix
+++ b/modules/nixos/services/pdf-edit/default.nix
@ -45,5 +45,21 @@ in
        inherit (cfg) port;
      };
    };
+
+    services.fail2ban.jails = {
+      stirling-pdf = ''
+        enabled = true
+        filter = stirling-pdf
+        port = http,https
+      '';
+    };
+
+    environment.etc = {
+      "fail2ban/filter.d/stirling-pdf.conf".text = ''
+        [Definition]
+        failregex = ^.*Failed login attempt from IP: <HOST>$
+        journalmatch = _SYSTEMD_UNIT=stirling-pdf.service
+      '';
+    };
  };
 }