From 052461ecc92d19baf0d3e772c65f05503f6408e6 Mon Sep 17 00:00:00 2001
From: Alexander Kobjolke <me@failco.de>
Date: Wed, 16 Mar 2022 18:59:39 +0100
Subject: [PATCH] Enable fail2ban on thrall

---
 hosts/thrall/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hosts/thrall/default.nix b/hosts/thrall/default.nix
index 60c7b99..d3d6381 100644
--- a/hosts/thrall/default.nix
+++ b/hosts/thrall/default.nix
@@ -178,6 +178,12 @@
     };
   };
 
+  services.fail2ban = {
+    enable = true;
+    maxretry = 5;
+    ignoreIP = [ "127.0.0.0/8" "10.0.0.0/8" "192.168.0.0/16" ];
+  };
+
   mailserver = {
     enable = true;
     fqdn = "thrall.failco.de";