nixos: services: miniflux: add fail2ban jail

nixos: services: nextcloud: add fail2ban jail
2024-09-22 01:59:04 +02:00 · 2024-09-22 01:59:04 +02:00
2 changed files with 16 additions and 1 deletions
--- a/modules/nixos/services/miniflux/default.nix
+++ b/modules/nixos/services/miniflux/default.nix
@ -48,5 +48,21 @@ in
        inherit (cfg) port;
      };
    };
+
+    services.fail2ban.jails = {
+      miniflux = ''
+        enabled = true
+        filter = miniflux
+        port = http,https
+      '';
+    };
+
+    environment.etc = {
+      "fail2ban/filter.d/miniflux.conf".text = ''
+        [Definition]
+        failregex = ^.*msg="[^"]*(Incorrect|Invalid) username or password[^"]*".*client_ip=<ADDR>
+        journalmatch = _SYSTEMD_UNIT=miniflux.service
+      '';
+    };
  };
 }
--- a/modules/nixos/services/nextcloud/default.nix
+++ b/modules/nixos/services/nextcloud/default.nix
@ -107,6 +107,5 @@ in
        journalmatch = _SYSTEMD_UNIT=phpfpm-nextcloud.service
      '';
    };
-
  };
 }
Author	SHA1	Message	Date
Bruno BELANYI	a059828a58	nixos: services: miniflux: add fail2ban jail All checks were successful ci/woodpecker/push/check Pipeline was successful Details	2024-09-22 01:59:04 +02:00
Bruno BELANYI	96e1a54638	nixos: services: nextcloud: add fail2ban jail	2024-09-22 01:59:04 +02:00