diff options
author | Solene Rapenne <solene.rapenne@tweag.io> | 2022-10-02 12:59:54 +0200 |
---|---|---|
committer | Solene Rapenne <solene.rapenne@tweag.io> | 2022-10-02 12:59:54 +0200 |
commit | 605a588ea6d952227fe6554011add1650bfe8eb7 (patch) | |
tree | 794629d4bfbcd9750c1d52a6d0b954cb49deb8ba /nixos | |
parent | 2a48d5921115733b840e651b843a3c7c515db582 (diff) | |
download | nixpkgs-605a588ea6d952227fe6554011add1650bfe8eb7.tar nixpkgs-605a588ea6d952227fe6554011add1650bfe8eb7.tar.gz nixpkgs-605a588ea6d952227fe6554011add1650bfe8eb7.tar.bz2 nixpkgs-605a588ea6d952227fe6554011add1650bfe8eb7.tar.lz nixpkgs-605a588ea6d952227fe6554011add1650bfe8eb7.tar.xz nixpkgs-605a588ea6d952227fe6554011add1650bfe8eb7.tar.zst nixpkgs-605a588ea6d952227fe6554011add1650bfe8eb7.zip |
nixos/fail2ban: improve module documentation
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/services/security/fail2ban.nix | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/nixos/modules/services/security/fail2ban.nix b/nixos/modules/services/security/fail2ban.nix index 29aa49c8aad..e208eed008a 100644 --- a/nixos/modules/services/security/fail2ban.nix +++ b/nixos/modules/services/security/fail2ban.nix @@ -91,8 +91,9 @@ in example = "nftables-multiport"; description = lib.mdDoc '' Default banning action (e.g. iptables, iptables-new, iptables-multiport, - shorewall, etc) It is used to define action_* variables. Can be overridden - globally or per section within jail.local file + iptables-ipset-proto6-allports, shorewall, etc) It is used to + define action_* variables. Can be overridden globally or per + section within jail.local file ''; }; @@ -212,10 +213,18 @@ in filter = apache-nohome action = iptables-multiport[name=HTTP, port="http,https"] logpath = /var/log/httpd/error_log* + backend = auto findtime = 600 bantime = 600 maxretry = 5 '''; + dovecot = ''' + # block IPs which failed to log-in + # aggressive mode add blocking for aborted connections + enabled = true + filter = dovecot[mode=aggressive] + maxretry = 3 + '''; } ''; type = types.attrsOf types.lines; |