diff options
| author | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2026-02-11 15:36:27 +0100 |
|---|---|---|
| committer | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2026-02-11 15:36:27 +0100 |
| commit | f373e772781c9d1cdbe2f97ef3791a7b41ac0657 (patch) | |
| tree | 7087dc65362f37b0ef6b85ac9e46a66fc491af1a /hosts/omega-relay/default.nix | |
| parent | 04707c728441000d64d3d750916354310ff2d2ab (diff) | |
Nixfmt
Diffstat (limited to '')
| -rw-r--r-- | hosts/omega-relay/default.nix | 23 |
1 files changed, 11 insertions, 12 deletions
diff --git a/hosts/omega-relay/default.nix b/hosts/omega-relay/default.nix index 3c7272c..95e03e4 100644 --- a/hosts/omega-relay/default.nix +++ b/hosts/omega-relay/default.nix @@ -24,14 +24,13 @@ desktop.xfce.enable = lib.mkForce false; gpg.enable = true; - virtualisation.guest = true; + virtualisation.guest = true; }; boot.loader.grub = { enable = true; efiSupport = false; }; - environment.systemPackages = with pkgs; [ lynx chawan @@ -77,22 +76,22 @@ }; services.fail2ban = { - enable = true; + enable = true; maxretry = 5; ignoreIP = [ - "192.168.80.0/24" "192.168.80.0/24" - ]; - bantime = "24h"; + "192.168.80.0/24" + ]; + bantime = "24h"; bantime-increment = { enable = true; # Enable increment of bantime after each violation formula = "ban.Time * math.exp(float(ban.Count+1)*banFactor)/math.exp(1*banFactor)"; # multipliers = "1 2 4 8 16 32 64"; maxtime = "168h"; # Do not ban for more than 1 week overalljails = true; # Calculate the bantime based on all the violations - }; + }; }; - + # TODO: Make a nginx module security.acme = lib.mkIf (!config.addons.virtualisation.isTestVM) { acceptTerms = true; @@ -109,10 +108,10 @@ enableACME = !isVM; addSSL = !isVM; root = "/srv/www/wilkuu.xyz/"; - locations."/" = { - index = "index.html"; - tryFiles = "$uri $uri/ =404"; - }; + locations."/" = { + index = "index.html"; + tryFiles = "$uri $uri/ =404"; + }; }; }; |
