Increase fail2ban ban time on each attempt
Some checks failed
CI / build:all (push) Has been cancelled
CI / build:cross (push) Has been cancelled
CI / build:all (pull_request) Successful in 1h38m5s
CI / build:cross (pull_request) Successful in 1h38m3s

Reviewed-by: Aleix Boné <abonerib@bsc.es>
This commit was merged in pull request #217.
This commit is contained in:
2025-11-21 12:09:01 +01:00
parent f921f0a4bd
commit c2a201b085

View File

@@ -57,7 +57,14 @@
}; };
}; };
services.fail2ban.enable = true; services.fail2ban = {
enable = true;
maxretry = 5;
bantime-increment = {
enable = true; # Double ban time on each attack
maxtime = "7d"; # Ban up to a week
};
};
# Disable SSH login with password, allow only keypair # Disable SSH login with password, allow only keypair
services.openssh.settings.PasswordAuthentication = false; services.openssh.settings.PasswordAuthentication = false;