nix-config/configs/nixos/fail2ban.nix

16 lines
266 B
Nix

{
config,
pkgs,
inputs,
lib,
myLib,
...
}: {
services.fail2ban = {
enable = true;
bantime-increment.enable = true;
bantime-increment.maxtime = "1w";
extraPackages = [pkgs.ipset];
banaction = "iptables-ipset-proto6-allports";
};
}