Files
nix/hosts/common/configs/system/sshd/default.nix
Nikolaos Karaolidis e227cab2d7 Add fail2ban
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
2025-03-07 10:15:37 +00:00

28 lines
464 B
Nix

{ ... }:
{
environment = {
enableAllTerminfo = true;
persistence."/persist"."/var/lib/fail2ban" = { };
};
services = {
openssh = {
enable = true;
settings = {
PasswordAuthentication = false;
PrintMotd = false;
};
};
fail2ban = {
enable = true;
bantime = "24h";
bantime-increment = {
enable = true;
maxtime = "720h";
overalljails = true;
};
};
};
}