feat: add 'fail2ban' to 'hecuba' host

2025-12-09 23:10:24 +01:00
parent 098bbbb5d2
commit ce732af957
1 changed files with 10 additions and 5 deletions
--- a/hosts/hecuba/default.nix
+++ b/hosts/hecuba/default.nix
@@ -9,11 +9,6 @@
    ../../modules/ssh/hardened-openssh.nix
  ];

-  environment.systemPackages = with pkgs; [
-    vim
-    git
-  ];
-
  fileSystems."/" = {
    device = "/dev/disk/by-label/nixos";
    fsType = "ext4";
@@ -48,6 +43,16 @@
    firewall.enable = true;
  };

+  environment.systemPackages = with pkgs; [
+    vim
+    git
+  ];
+
+  services.fail2ban = {
+    enable = true;
+    maxretry = 5;
+  };
+
  services.openssh = {
    enable = true;
    harden = true;