diff --git a/base/activation-manuelle/fail2ban.nix b/base/activation-manuelle/service-fail2ban.nix similarity index 63% rename from base/activation-manuelle/fail2ban.nix rename to base/activation-manuelle/service-fail2ban.nix index 9f28547..29d8f4d 100644 --- a/base/activation-manuelle/fail2ban.nix +++ b/base/activation-manuelle/service-fail2ban.nix @@ -4,6 +4,10 @@ with pkgs.lib; let cfg = config.r6d.config-generator; + + ignoreip = "pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16"; + destemail = "admins@dubronetwork.fr"; + in { # Gestion de fail2ban @@ -13,18 +17,16 @@ in { jails = { DEFAULT = '' # "ignoreip" can be an IP address, a CIDR mask or a DNS host - ignoreip = 127.0.0.1/8 pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16 + ignoreip = 127.0.0.1/8 ${ignoreip} # 1 jour # bantime = 86400 # 5 jours bantime = 432000 + maxretry = 3 - # - # Destination email address used solely for the interpolations in - # jail.{conf,local} configuration files. - destemail = admins@dubronetwork.fr + destemail = ${destemail} ''; ssh-route = '' filter = sshd diff --git a/base/base.nix b/base/base.nix index 54a51df..1a7f298 100644 --- a/base/base.nix +++ b/base/base.nix @@ -5,7 +5,7 @@ ./network-dns.nix # inclusion conditionnelle - ./activation-manuelle/fail2ban.nix + ./activation-manuelle/service-fail2ban.nix ./activation-manuelle/nix-serve-client.nix ./activation-manuelle/nix-serve-server.nix ./activation-manuelle/users.nix