From b624d64116cd134d105d45dc2c89457c2031153d Mon Sep 17 00:00:00 2001
From: Pavel <pavel123357@gmail.com>
Date: Wed, 11 Mar 2026 19:52:02 +0300
Subject: [PATCH] upd nixos conf

---
 nixos/configuration.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index 596cb87..8395187 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -87,6 +87,16 @@
       findtime = 10m
       maxretry = 5
     '';
+    jails.immich = ''
+      enabled = true
+      filter = immich
+      logpath = /var/log/caddy/access.log
+      backend = auto
+      port = http,https
+      maxretry = 5
+      findtime = 10m
+      bantime = 1h
+    '';
    };
   
 
@@ -96,6 +106,11 @@
     failregex = ^.*"remote_ip":"<HOST>".*"host":"vault\.sesur\.dev".*"uri":"\/identity\/connect\/token".*"status":(400|401).*$
     ignoreregex =
   '';
+  environment.etc."fail2ban/filter.d/immich.conf".text = ''
+  [Definition]
+  failregex = ^.*"remote_ip":"<HOST>".*"uri":"\/api\/auth\/login".*"status":401.*$
+  ignoreregex =
+  '';
   
   # Disable suspend of my homelab. Added when my server every ~15 minutes suspend.
   services.logind.settings.Login = {