aboutsummaryrefslogtreecommitdiff
path: root/modules/nixos/server/fail2ban
diff options
context:
space:
mode:
authorschererleander <leander@schererleander.de>2026-01-09 16:57:15 +0100
committerschererleander <leander@schererleander.de>2026-01-09 23:13:49 +0100
commit3b5a73c436eb22e0cda59469263490705e149cb9 (patch)
treeae3f20ca6008b11f71247dfc6e2df8218de9b95c /modules/nixos/server/fail2ban
parentec45aae780da92e12cf82c5a32e336b14b7540ba (diff)
refactor: use flake-parts, change modules structure
Diffstat (limited to 'modules/nixos/server/fail2ban')
-rw-r--r--modules/nixos/server/fail2ban/default.nix25
1 files changed, 25 insertions, 0 deletions
diff --git a/modules/nixos/server/fail2ban/default.nix b/modules/nixos/server/fail2ban/default.nix
new file mode 100644
index 0000000..21020b5
--- /dev/null
+++ b/modules/nixos/server/fail2ban/default.nix
@@ -0,0 +1,25 @@
+{
+ config,
+ lib,
+ ...
+}:
+let
+ inherit (lib) mkEnableOption mkOption types mkIf;
+ cfg = config.nx.server.fail2ban;
+in
+{
+ options.nx.server.fail2ban = {
+ enable = mkEnableOption "fail2ban service";
+ bantime = mkOption {
+ description = "default bantime";
+ type = types.str;
+ default = "1h";
+ };
+ };
+ config = mkIf cfg.enable {
+ services.fail2ban = {
+ enable = true;
+ bantime = cfg.bantime;
+ };
+ };
+}