diff --git a/nixos/configuration.nix b/nixos/configuration.nix index 308d01b..1b6fd74 100644 --- a/nixos/configuration.nix +++ b/nixos/configuration.nix @@ -107,6 +107,17 @@ findtime = 10m bantime = 1h ''; + jails.gitea = '' + enabled = true + filter = gitea + logpath = /var/log/caddy/access.log + backend = auto + port = http,https + maxretry = 5 + findtime = 10m + bantime = 1h + datepattern = "ts\":Epoch" + ''; }; @@ -121,6 +132,11 @@ failregex = ^.*"remote_ip":"".*"uri":"\/api\/auth\/login".*"status":401.*$ ignoreregex = ''; + environment.etc."fail2ban/filter.d/gitea.conf".text = '' + [Definition] + failregex = ^.*"remote_ip":"".*"method":"POST".*"uri":"\/user\/login".*"status":200.*$ + ignoreregex = + ''; # For VsCode programs.nix-ld.enable = true;