activation règle ssh-iptable

2016-08-15 16:14:06 +02:00
parent 9190d21a65
commit 7b298ac8a3
1 changed files with 3 additions and 0 deletions
--- a/base/activation-manuelle/service-fail2ban.nix
+++ b/base/activation-manuelle/service-fail2ban.nix
@@ -39,4 +39,7 @@ mkIf cfg.fail2ban {
      };
    };
  };
+
+  # https://github.com/NixOS/nixpkgs/issues/8437
+  services.fail2ban.jails.ssh-iptables = "enabled = true";
 }