server: gitea: fail2ban fix

2023-06-04 14:22:57 +02:00 · 2023-06-04 14:22:57 +02:00 · 6059c3c0ba
commit 6059c3c0ba
parent 1771fba57b
2 changed files with 6 additions and 3 deletions
--- a/hosts/configuration_server.nix
+++ b/hosts/configuration_server.nix
@ -116,14 +116,15 @@
    fail2ban = {
        enable = true;
        maxretry = 5;
+        extraSettings = {
+           findtime = "15m";
+           bantime = "1h";
+        };
        jails = {
            gitea = ''
              enabled = true
              filter = gitea
              backend = systemd
-              maxretry = 10
-              findtime = 3600
-              bantime = 900
              action = iptables-allports
            '';
          };
--- a/modules/services/server/fail2ban/filter/gitea.conf
+++ b/modules/services/server/fail2ban/filter/gitea.conf
@ -1,3 +1,5 @@
 [Definition]
 failregex =  .*(Failed authentication attempt|invalid credentials|Attempted access of unknown user).* from <HOST>
 ignoreregex =
+#journalmatch = _SYSTEMD_UNIT=gitea.servie
+journalmatch =