TheWanderingCrow/CrOS
1
0
Fork 0
mirror of https://github.com/TheWanderingCrow/CrOS.git synced 2026-03-30 01:37:25 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

setup fail2ban with expected internal IP ranges on ignore

Browse source
This commit is contained in:
TheWanderingCrow 2026-03-16 10:23:02 -04:00
parent 8d2453f31f
commit fb241568a2
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
hosts/common/core/ssh.nix
View file

@ -32,5 +32,11 @@
};
};
#services.fail2ban.enable = lib.mkDefault true; # This comes with an SSH jail preconfigured, expanded fail2ban can be found in modules/services
services.fail2ban = {
enable = lib.mkDefault true;
ignoreIP = [ # Expected internal IP ranges
"172.16.0.0/12"
"192.168.0.0/16"
];
};
}