ajout de variables locales pour la config de fail2ban

extraction-donnees-privees
Jean-Pierre PRUNARET 9 years ago
parent c5b9c97327
commit 4c3e1abfcb

@ -4,6 +4,10 @@ with pkgs.lib;
let
cfg = config.r6d.config-generator;
ignoreip = "pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16";
destemail = "admins@dubronetwork.fr";
in {
# Gestion de fail2ban
@ -13,18 +17,16 @@ in {
jails = {
DEFAULT = ''
# "ignoreip" can be an IP address, a CIDR mask or a DNS host
ignoreip = 127.0.0.1/8 pedro.dubronetwork.fr cube.dubronetwork.fr voyage.prunetwork.fr xray.prunetwork.fr 192.168.0.0/16 172.16.0.0/16
ignoreip = 127.0.0.1/8 ${ignoreip}
# 1 jour
# bantime = 86400
# 5 jours
bantime = 432000
maxretry = 3
#
# Destination email address used solely for the interpolations in
# jail.{conf,local} configuration files.
destemail = admins@dubronetwork.fr
destemail = ${destemail}
'';
ssh-route = ''
filter = sshd

@ -5,7 +5,7 @@
./network-dns.nix
# inclusion conditionnelle
./activation-manuelle/fail2ban.nix
./activation-manuelle/service-fail2ban.nix
./activation-manuelle/nix-serve-client.nix
./activation-manuelle/nix-serve-server.nix
./activation-manuelle/users.nix

Loading…
Cancel
Save