hosts: add dmz, cleanups

This commit is contained in:
2023-10-16 10:33:47 +02:00
parent 5dc2c8a98b
commit 9cee80bed2
12 changed files with 338 additions and 56 deletions

View File

@@ -75,16 +75,6 @@
EDITOR = "nvim";
VISUAL = "nvim";
};
etc = {
"fail2ban/filter.d/gitea.conf" = {
source = ../modules/services/server/fail2ban/filter/gitea.conf;
mode = "0444";
};
"fail2ban/filter.d/nextcloud.conf" = {
source = ../modules/services/server/fail2ban/filter/nextcloud.conf;
mode = "0444";
};
};
systemPackages = with pkgs; [ # Default packages install system-wide
vim
git
@@ -117,29 +107,6 @@
ports = [ 2220 ];
openFirewall = true;
};
fail2ban = {
enable = true;
maxretry = 5;
jails.DEFAULT.settings = {
findtime = "15m";
bantime = "1h";
};
jails = {
gitea = ''
enabled = true
filter = gitea
backend = systemd
action = iptables-allports
'';
nextcloud = ''
backend = auto
enabled = true
filter = nextcloud
logpath = /var/lib/nextcloud/data/nextcloud.log
action = iptables-allports
'';
};
};
#flatpak.enable = true; # download flatpak file from website - sudo flatpak install <path> - reboot if not showing up
# sudo flatpak uninstall --delete-data <app-id> (> flatpak list --app) - flatpak uninstall --unused