summaryrefslogtreecommitdiff
path: root/modules/nixos/server/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/nixos/server/default.nix')
-rw-r--r--modules/nixos/server/default.nix20
1 files changed, 6 insertions, 14 deletions
diff --git a/modules/nixos/server/default.nix b/modules/nixos/server/default.nix
index 504a333..210484e 100644
--- a/modules/nixos/server/default.nix
+++ b/modules/nixos/server/default.nix
@@ -24,15 +24,6 @@ in {
environment.systemPackages = [pkgs.cachix];
- networking = {
- firewall = let
- ports = [80 420];
- in {
- allowedUDPPorts = ports;
- allowedTCPPorts = ports;
- };
- };
-
nix = {
gc.options = "--delete-older-than 7d --max-freed 50G";
settings = {
@@ -63,16 +54,17 @@ in {
};
services = {
- endlessh = {
- enable = mkDefault true;
- port = mkDefault 22;
- openFirewall = mkDefault true;
+ fail2ban = {
+ enable = true;
+ bantime-increment = {
+ enable = true;
+ };
+ maxretry = 5;
};
openssh = {
enable = true;
passwordAuthentication = mkDefault false;
- ports = mkDefault [420];
};
};
};