diff --git a/hosts/configuration_server.nix b/hosts/configuration_server.nix index f3ac4f9..e02f79c 100644 --- a/hosts/configuration_server.nix +++ b/hosts/configuration_server.nix @@ -116,14 +116,15 @@ fail2ban = { enable = true; maxretry = 5; + extraSettings = { + findtime = "15m"; + bantime = "1h"; + }; jails = { gitea = '' enabled = true filter = gitea backend = systemd - maxretry = 10 - findtime = 3600 - bantime = 900 action = iptables-allports ''; }; diff --git a/modules/services/server/fail2ban/filter/gitea.conf b/modules/services/server/fail2ban/filter/gitea.conf index bd0f976..13f2813 100644 --- a/modules/services/server/fail2ban/filter/gitea.conf +++ b/modules/services/server/fail2ban/filter/gitea.conf @@ -1,3 +1,5 @@ [Definition] failregex = .*(Failed authentication attempt|invalid credentials|Attempted access of unknown user).* from ignoreregex = +#journalmatch = _SYSTEMD_UNIT=gitea.servie +journalmatch =