From 07177629bc2da4496aa3126a9089d712d0ff59e3 Mon Sep 17 00:00:00 2001
From: Alexander Kobjolke <me@failco.de>
Date: Fri, 19 Jan 2024 20:38:34 +0100
Subject: [PATCH] thrall: Activate fail2ban for postfix

---
 hosts/thrall/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/hosts/thrall/default.nix b/hosts/thrall/default.nix
index ddd9fe2..8ef9c36 100644
--- a/hosts/thrall/default.nix
+++ b/hosts/thrall/default.nix
@@ -324,6 +324,13 @@ in {
     maxretry = 5;
     ignoreIP =
       [ "127.0.0.0/8" "195.90.211.228/22" "10.0.0.0/8" "192.168.0.0/16" ];
+
+    jails.postfix = ''
+      filter   = postfix
+      maxretry = 3
+      action   = iptables[name=postfix, port=smtp, protocol=tcp]
+      enabled  = true
+    '';
   };
 
   services.syncthing = {