Fail2ban: Difference between revisions
imported>Writer Streamline text and adapt to 23.11 where new expressions are possible and one was removed |
imported>Rollin rob No edit summary |
||
| Line 8: | Line 8: | ||
services.fail2ban.enable = true; | services.fail2ban.enable = true; | ||
</syntaxHighlight> | </syntaxHighlight> | ||
NixOS comes with a pre-configured SSH jail which will observe errors in the SSH daemon and ban offending IPs. If | NixOS comes with a pre-configured SSH jail which will observe errors in the SSH daemon and ban offending IPs. If all you need is basic rate-limiting and only have the SSH port exposed, you don't have to setup anything else. | ||
== Advanced Usage == | == Advanced Usage == | ||