cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity

feat(firewall): Sunset fail2ban and switch to reaction

Browse source
This commit is contained in:
Tom Hubrecht 2024-09-01 22:47:56 +02:00
parent 86c1018dc8
commit fd0aeacff4
Signed by: thubrecht
SSH key fingerprint: SHA256:r+nK/SIcWlJ0zFZJGHtlAoRwq1Rm+WcKAm5ADYMoQPc
12 changed files with 137 additions and 214 deletions
Download patch file Download diff file Expand all files Collapse all files

6
machines/web02/_configuration.nix
View file

@ -3,7 +3,6 @@
lib.extra.mkConfig {
enabledModules = [
# List of modules to enable
"dgn-fail2ban"
"dgn-web"
];
@ -14,11 +13,6 @@ lib.extra.mkConfig {
];
extraConfig = {
dgn-fail2ban.jails = lib.extra.enableAttrs' "enabled" [
"sshd-bruteforce"
"sshd-timeout"
];
# Restrict access to this node
dgn-access-control.users.root = [ "thubrecht" ];