nixos: services: audiobookshelf: add fail2ban jail

2024-09-22 01:10:52 +02:00 · 2024-09-22 01:10:52 +02:00 · f24cf2e16d
parent cedac6bbf4
commit f24cf2e16d
1 changed files with 16 additions and 0 deletions
--- a/modules/nixos/services/audiobookshelf/default.nix
+++ b/modules/nixos/services/audiobookshelf/default.nix
@ -35,5 +35,21 @@ in
        };
      };
    };
+
+    services.fail2ban.jails = {
+      audiobookshelf = ''
+        enabled = true
+        filter = audiobookshelf
+        port = http,https
+      '';
+    };
+
+    environment.etc = {
+      "fail2ban/filter.d/audiobookshelf.conf".text = ''
+        [Definition]
+        failregex = ^.*ERROR: \[Auth\] Failed login attempt for username ".*" from ip <ADDR>
+        journalmatch = _SYSTEMD_UNIT=audiobookshelf.service
+      '';
+    };
  };
 }