Commit 3403ee06 authored by datafoo's avatar datafoo Committed by pennae
Browse files

nixos/fail2ban: add bantime option

parent d32a852d

nixos/modules/services/security/fail2ban.nix

+10 −0
Original line number Diff line number Diff line
@@ -78,6 +78,13 @@ in 
        '';

      };



      bantime = mkOption {

        default = null;

        type = types.nullOr types.str;

        example = "10m";

        description = lib.mdDoc "Number of seconds that a host is banned.";

      };



      maxretry = mkOption {

        default = 3;

        type = types.ints.unsigned;
@@ -320,6 +327,9 @@ in 
      ''}

      # Miscellaneous options

      ignoreip    = 127.0.0.1/8 ${optionalString config.networking.enableIPv6 "::1"} ${concatStringsSep " " cfg.ignoreIP}

      ${optionalString (cfg.bantime != null) ''

        bantime     = ${cfg.bantime}

      ''}

      maxretry    = ${toString cfg.maxretry}

      backend     = systemd

      # Actions