ajout de variables locales pour la config de fail2ban

base/activation-manuelle/service-fail2ban.nix

@@ -4,6 +4,10 @@ with pkgs.lib;
 
 let
   cfg = config.r6d.config-generator;
+
+  ignoreip = "pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16";
+  destemail = "admins@dubronetwork.fr";
+
 in {
   # Gestion de fail2ban
   
@@ -13,18 +17,16 @@ in {
       jails = {
         DEFAULT = ''
           # "ignoreip" can be an IP address, a CIDR mask or a DNS host
-          ignoreip = 127.0.0.1/8 pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16
+          ignoreip = 127.0.0.1/8 ${ignoreip}
 
           # 1 jour
           # bantime  = 86400
           # 5 jours 
           bantime  = 432000
+
           maxretry = 3
 
-          #
+          destemail = ${destemail}
-          # Destination email address used solely for the interpolations in
-          # jail.{conf,local} configuration files.
-          destemail = admins@dubronetwork.fr
         '';
         ssh-route = ''
           filter   = sshd

base/base.nix

@@ -5,7 +5,7 @@
     ./network-dns.nix
 
     # inclusion conditionnelle
-    ./activation-manuelle/fail2ban.nix
+    ./activation-manuelle/service-fail2ban.nix
     ./activation-manuelle/nix-serve-client.nix
     ./activation-manuelle/nix-serve-server.nix
     ./activation-manuelle/users.nix