Compare commits
No commits in common. "68185640aa1209e1973c7557f7ed45e7f2243033" and "2a1259cbfa486bed852a204199d3cd3a62c2d7d4" have entirely different histories.
68185640aa
...
2a1259cbfa
|
@ -46,13 +46,6 @@ in {
|
||||||
datepattern = ^%%Y-%%m-%%d %%H:%%M:%%S
|
datepattern = ^%%Y-%%m-%%d %%H:%%M:%%S
|
||||||
'')
|
'')
|
||||||
);
|
);
|
||||||
"fail2ban/filter.d/immich.local".text = lib.mkIf config.services.immich.enable (
|
|
||||||
pkgs.lib.mkDefault (pkgs.lib.mkAfter ''
|
|
||||||
[Definition]
|
|
||||||
failregex = immich-server.*Failed login attempt for user.+from ip address\s?<ADDR>
|
|
||||||
journalmatch = CONTAINER_TAG=immich-server
|
|
||||||
'')
|
|
||||||
);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
services.fail2ban = {
|
services.fail2ban = {
|
||||||
|
@ -115,11 +108,6 @@ in {
|
||||||
bantime = 600;
|
bantime = 600;
|
||||||
maxretry = 5;
|
maxretry = 5;
|
||||||
};
|
};
|
||||||
immich-iptables.settings = lib.mkIf config.services.immich.enable {
|
|
||||||
enabled = true;
|
|
||||||
filter = "immich";
|
|
||||||
backend = "systemd";
|
|
||||||
};
|
|
||||||
# TODO; figure out if there is any fail2ban things we can do on searx
|
# TODO; figure out if there is any fail2ban things we can do on searx
|
||||||
# searx-iptables.settings = lib.mkIf config.services.searx.enable {};
|
# searx-iptables.settings = lib.mkIf config.services.searx.enable {};
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in a new issue