activation règle ssh-iptable

9 years ago · 7b298ac8a3
parent 9190d21a65
commit 7b298ac8a3
1 changed files with 3 additions and 0 deletions
--- a/base/activation-manuelle/service-fail2ban.nix
+++ b/base/activation-manuelle/service-fail2ban.nix
@ -39,4 +39,7 @@ mkIf cfg.fail2ban {
      };
    };
  };
+
+  # https://github.com/NixOS/nixpkgs/issues/8437
+  services.fail2ban.jails.ssh-iptables = "enabled = true";
 }