diff options
| author | Rob Vermaas <rob.vermaas@gmail.com> | 2013-07-25 15:40:20 +0200 |
|---|---|---|
| committer | Rob Vermaas <rob.vermaas@gmail.com> | 2013-07-25 15:40:20 +0200 |
| commit | c5f6a0875096c1904d95146767f0f01f521614e8 (patch) | |
| tree | 20dbe1c0c841727e6b41532c90f1631a3817df36 /modules/services/security/fail2ban.nix | |
| parent | 73284567cc8d9b6e79c9595351d1840f3781c8df (diff) | |
| download | nixpkgs-c5f6a0875096c1904d95146767f0f01f521614e8.tar nixpkgs-c5f6a0875096c1904d95146767f0f01f521614e8.tar.gz nixpkgs-c5f6a0875096c1904d95146767f0f01f521614e8.tar.bz2 nixpkgs-c5f6a0875096c1904d95146767f0f01f521614e8.tar.lz nixpkgs-c5f6a0875096c1904d95146767f0f01f521614e8.tar.xz nixpkgs-c5f6a0875096c1904d95146767f0f01f521614e8.tar.zst nixpkgs-c5f6a0875096c1904d95146767f0f01f521614e8.zip | |
Make fail2ban a normal systemd service in nixos module.
Diffstat (limited to 'modules/services/security/fail2ban.nix')
| -rw-r--r-- | modules/services/security/fail2ban.nix | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/modules/services/security/fail2ban.nix b/modules/services/security/fail2ban.nix index 3c3519a9db7..d90cf8d4471 100644 --- a/modules/services/security/fail2ban.nix +++ b/modules/services/security/fail2ban.nix @@ -98,11 +98,12 @@ in } ]; - jobs.fail2ban = + systemd.services.fail2ban = { description = "Fail2ban intrusion prevention system"; + + wantedBy = [ "multi-user.target" ]; + after = [ "network.target" ]; - startOn = "started networking"; - path = [ pkgs.fail2ban pkgs.iptables ]; preStart = @@ -113,7 +114,7 @@ in mkdir -p /var/run/fail2ban -m 0755 ''; - exec = "fail2ban-server -f"; + serviceConfig.ExecStart = "${pkgs.fail2ban}/bin/fail2ban-server -f"; postStart = '' |