c8h4/nixos-config
1
0
Fork 0
Code Issues Actions Activity

services: vaultwarden: add fail2ban jail
All checks were successful
flake / build (push) Successful in 3m7s
Details

Browse source 
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
This commit is contained in:
Christoph Heiss 2024-08-19 10:39:58 +02:00
parent e373b1aa98
commit b4c458e11a
Signed by: c8h4
GPG key ID: 1538094429952F86
1 changed files with 21 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
services/vaultwarden.nix
View file

@ -41,4 +41,25 @@ in {
'';
};
};
services.fail2ban.jails.vaultwarden =
lib.mkIf config.services.fail2ban.enable {
filter = {
INCLUDES.before = "common.conf";
Definition = {
failregex =
"^.*?Username or password is incorrect. Try again. IP: <ADDR>. Username:.*$";
ignoreregex = "";
};
};
settings = {
enabled = true;
backend = "systemd";
journalmatch = "_SYSTEMD_UNIT=vaultwarden.service + _COMM=vaultwarden";
port = "http,https";
filter = "vaultwarden";
bantime = "48h";
findtime = "4h";
};
};
}