Nix configurations for my homelab
1{ config, lib, ... }:
2{
3 environment.persistence."/data/persistent".directories = [ "/var/lib/fail2ban" ];
4
5 services.fail2ban = {
6 enable = true;
7 bantime = "12h";
8 bantime-increment = {
9 enable = true;
10 formula = "ban.Time * (2 ** ban.Count)";
11 overalljails = true;
12 rndtime = "1h";
13 };
14 ignoreIP = [
15 (lib.mkIf (config.networking.hostName != "lily") config.cafe.info.network.lily.netbird-ipv4)
16 (lib.mkIf (config.networking.hostName != "lutea") config.cafe.info.network.lutea.netbird-ipv4)
17 ];
18 maxretry = 1;
19 };
20}