ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Compare commits

..

3 commits
4e093fbff3 ... 7922fc0196

Author SHA1 Message Date
Bruno BELANYI 7922fc0196 nixos: services: nextcloud: add fail2ban jail 2024-09-22 01:26:06 +02:00
Bruno BELANYI 22f0c2bfb4 nixos: services: audiobookshelf: add fail2ban jail 2024-09-22 01:10:56 +02:00
Bruno BELANYI c218a9f2cf nixos: services: mealie: add fail2ban jail 2024-09-22 01:10:56 +02:00
3 changed files with 5 additions and 5 deletions
modules/nixos/services
audiobookshelf
default.nix
mealie
default.nix
nextcloud
default.nix

2
modules/nixos/services/audiobookshelf/default.nix
View file

@ -47,7 +47,7 @@ in
environment.etc = { environment.etc = {
"fail2ban/filter.d/audiobookshelf.conf".text = '' "fail2ban/filter.d/audiobookshelf.conf".text = ''
[Definition] [Definition]
failregex = ^.*ERROR: \[Auth\] Failed login attempt for username ".*" from ip <ADDR> failregex = ERROR: \[Auth\] Failed login attempt for username ".*" from ip <ADDR>
journalmatch = _SYSTEMD_UNIT=audiobookshelf.service journalmatch = _SYSTEMD_UNIT=audiobookshelf.service
''; '';
}; };

2
modules/nixos/services/mealie/default.nix
View file

@ -83,7 +83,7 @@ in
environment.etc = { environment.etc = {
"fail2ban/filter.d/mealie.conf".text = '' "fail2ban/filter.d/mealie.conf".text = ''
[Definition] [Definition]
failregex = ^.*ERROR.*Incorrect username or password from <HOST> failregex = ^ERROR.*Incorrect username or password from <HOST>
journalmatch = _SYSTEMD_UNIT=mealie.service journalmatch = _SYSTEMD_UNIT=mealie.service
''; '';
}; };

6
modules/nixos/services/nextcloud/default.nix
View file

@ -101,9 +101,9 @@ in
[Definition] [Definition]
_groupsre = (?:(?:,?\s*"\w+":(?:"[^"]+"|\w+))*) _groupsre = (?:(?:,?\s*"\w+":(?:"[^"]+"|\w+))*)
datepattern = ,?\s*"time"\s*:\s*"%%Y-%%m-%%d[T ]%%H:%%M:%%S(%%z)?" datepattern = ,?\s*"time"\s*:\s*"%%Y-%%m-%%d[T ]%%H:%%M:%%S(%%z)?"
failregex = ^[^{]*\{%(_groupsre)s,?\s*"remoteAddr":"<HOST>"%(_groupsre)s,?\s*"message":"Login failed: failregex = \{%(_groupsre)s,?\s*"remoteAddr":"<HOST>"%(_groupsre)s,?\s*"message":"Login failed:
^[^{]*\{%(_groupsre)s,?\s*"remoteAddr":"<HOST>"%(_groupsre)s,?\s*"message":"Trusted domain error. \{%(_groupsre)s,?\s*"remoteAddr":"<HOST>"%(_groupsre)s,?\s*"message":"Trusted domain error.
^[^{]*\{%(_groupsre)s,?\s*"remoteAddr":"<HOST>"%(_groupsre)s,?\s*"message":"Two-factor challenge failed: \{%(_groupsre)s,?\s*"remoteAddr":"<HOST>"%(_groupsre)s,?\s*"message":"Two-factor challenge failed:
journalmatch = _SYSTEMD_UNIT=phpfpm-nextcloud.service journalmatch = _SYSTEMD_UNIT=phpfpm-nextcloud.service
''; '';
}; };