bertof/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(baldur): fail2ban nginx configuration

Browse source
This commit is contained in:
Filippo Berto 2025-10-16 15:08:02 +02:00
parent 5e25b6432e
commit 3cb057a31a
No known key found for this signature in database
GPG key ID: F1D17F9BCEC62FBC
1 changed files with 16 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

28
instances/baldur/configuration.nix
View file

@ -51,18 +51,22 @@
enable = true;
bantime-increment.enable = true;
jails = {
"nginx-botsearch" = ''
filter = nginx-botsearch
action = nftables-multiport[name=HTTP, port="http,https"]
logpath = /var/log/nginx/error.log*
backend = auto
'';
"nginx-http-auth" = ''
filter = nginx-http-auth
action = nftables-multiport[name=HTTP, port="http,https"]
logpath = /var/log/nginx/error.log*
backend = auto
'';
"nginx-botsearch" = {
settings = {
filter = "nginx-botsearch";
action = ''nftables-multiport[name=HTTP, port="http,https"]'';
logpath = "/var/log/nginx/error.log*";
backend = "auto";
};
};
"nginx-http-auth" = {
settings = {
filter = "nginx-http-auth";
action = ''nftables-multiport[name=HTTP, port="http,https"]'';
logpath = "/var/log/nginx/error.log*";
backend = "auto";
};
};
};
};
nginx = {