add fail2ban on ssh

2024-07-09 17:32:02 -05:00 · 2024-07-09 17:32:02 -05:00 · 72af92c4eb
commit 72af92c4eb
parent d273fb360d
1 changed files with 12 additions and 3 deletions
--- a/hosts/_common/components/ssh.nix
+++ b/hosts/_common/components/ssh.nix
@ -1,10 +1,19 @@
 { ... }:
 {
-  # Enable the OpenSSH daemon.
-  services.openssh.enable = true;
-  services.openssh.settings.PermitRootLogin = "yes";
+  # Use fail2ban
+  services.fail2ban = {
+    enable = true;
+  };
+
  # Open ports in the firewall.
  networking.firewall.allowedTCPPorts = [
    22 # sshd
  ];
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    logLevel = "VERBOSE";
+    settings.PermitRootLogin = "yes";
+  };
 }