diff --git a/configurations/nixos/defiant/configuration.nix b/configurations/nixos/defiant/configuration.nix index 6c2336a..5c3a7ed 100644 --- a/configurations/nixos/defiant/configuration.nix +++ b/configurations/nixos/defiant/configuration.nix @@ -108,7 +108,7 @@ subdomain = "search"; }; home-assistant = { - enable = true; + enable = false; subdomain = "home"; }; adguardhome = { diff --git a/modules/nixos-modules/server/fail2ban.nix b/modules/nixos-modules/server/fail2ban.nix index e3f6280..f410aeb 100644 --- a/modules/nixos-modules/server/fail2ban.nix +++ b/modules/nixos-modules/server/fail2ban.nix @@ -32,20 +32,20 @@ in { failregex = ".*(Failed authentication attempt|invalid credentials|Attempted access of unknown user).* from " '') ); - "fail2ban/filter.d/hass.local".text = lib.mkIf config.services.home-assistant.enable ( - pkgs.lib.mkDefault (pkgs.lib.mkAfter '' - [INCLUDES] - before = common.conf + # "fail2ban/filter.d/hass.local".text = lib.mkIf config.services.home-assistant.enable ( + # pkgs.lib.mkDefault (pkgs.lib.mkAfter '' + # [INCLUDES] + # before = common.conf - [Definition] - failregex = ^%(__prefix_line)s.*Login attempt or request with invalid authentication from .*$ + # [Definition] + # failregex = ^%(__prefix_line)s.*Login attempt or request with invalid authentication from .*$ - ignoreregex = + # ignoreregex = - [Init] - datepattern = ^%%Y-%%m-%%d %%H:%%M:%%S - '') - ); + # [Init] + # datepattern = ^%%Y-%%m-%%d %%H:%%M:%%S + # '') + # ); "fail2ban/filter.d/immich.local".text = lib.mkIf config.services.immich.enable ( pkgs.lib.mkDefault (pkgs.lib.mkAfter '' [Definition] @@ -105,16 +105,16 @@ in { bantime = 600; maxretry = 5; }; - home-assistant-iptables.settings = lib.mkIf config.services.home-assistant.enable { - enabled = true; - filter = "hass"; - action = ''iptables-multiport[name=HTTP, port="http,https"]''; - logpath = "${config.services.home-assistant.configDir}/*.log"; - backend = "auto"; - findtime = 600; - bantime = 600; - maxretry = 5; - }; + # home-assistant-iptables.settings = lib.mkIf config.services.home-assistant.enable { + # enabled = true; + # filter = "hass"; + # action = ''iptables-multiport[name=HTTP, port="http,https"]''; + # logpath = "${config.services.home-assistant.configDir}/*.log"; + # backend = "auto"; + # findtime = 600; + # bantime = 600; + # maxretry = 5; + # }; immich-iptables.settings = lib.mkIf config.services.immich.enable { enabled = true; filter = "immich";