modules: services: indexers: add prowlarr fail2ban

2023-09-03 12:21:04 +02:00 · 2023-09-03 12:21:04 +02:00 · adc4ce9d8a
parent ce46f3571b
commit adc4ce9d8a
1 changed files with 16 additions and 0 deletions
--- a/modules/services/indexers/default.nix
+++ b/modules/services/indexers/default.nix
@ -60,6 +60,22 @@ in
          port = prowlarrPort;
        }
      ];
+
+      services.fail2ban.jails = {
+        prowlarr = ''
+          enabled = true
+          filter = prowlarr
+          action = iptables-allports
+        '';
+      };
+
+      environment.etc = {
+        "fail2ban/filter.d/prowlarr.conf".text = ''
+          [Definition]
+          failregex = ^.*\|Warn\|Auth\|Auth-Failure ip <HOST> username .*$
+          journalmatch = _SYSTEMD_UNIT=prowlarr.service
+        '';
+      };
    })
  ];
 }