feat: make some settings better.

This commit is contained in:
CronyAkatsuki 2026-01-18 16:56:45 +01:00
parent 879ce06305
commit bf659b8482
4 changed files with 11 additions and 18 deletions

View file

@ -1,4 +1,8 @@
{...}: {
{
config,
lib,
...
}: {
services.openssh = {
enable = true;
settings = {
@ -25,19 +29,4 @@
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBJLduAXHWJiglmfRfkBGKffzVWkJP6porxIzw6+Zz3W crony@cronyakatsuki.xyz"
];
services.fail2ban = {
enable = true;
maxretry = 5;
ignoreIP = [
"65.21.241.194"
];
bantime = "24h"; # Ban IPs for one day on the first ban
bantime-increment = {
enable = true; # Enable increment of bantime after each violation
multipliers = "1 2 4 8 16 32 64";
maxtime = "168h"; # Do not ban for more than 1 week
overalljails = true; # Calculate the bantime based on all the violations
};
};
}