server: nextcloud: enable fail2ban

2023-06-04 15:03:12 +02:00
parent 6059c3c0ba
commit c17489376e
3 changed files with 18 additions and 0 deletions
--- a/hosts/configuration_server.nix
+++ b/hosts/configuration_server.nix
@@ -80,6 +80,10 @@
        source = ../modules/services/server/fail2ban/filter/gitea.conf;
        mode = "0444";
      };
+      "fail2ban/filter.d/nextcloud.conf" = {
+        source = ../modules/services/server/fail2ban/filter/nextcloud.conf;
+        mode = "0444";
+      };
    };
    systemPackages = with pkgs; [           # Default packages install system-wide
      vim
@@ -127,6 +131,12 @@
              backend = systemd
              action = iptables-allports
            '';
+            nextcloud = ''
+              backend = auto
+              enabled = true
+              filter = nextcloud
+              logpath = /var/lib/nextcloud/data/nextcloud.log
+              action = iptables-allports
          };
    };