Hardening SSH login in apex #217

Open
rarias wants to merge 3 commits from disable-password-login into master
Showing only changes of commit 15a26570be - Show all commits

View File

@ -57,7 +57,14 @@
}; };
}; };
services.fail2ban.enable = true; services.fail2ban = {
enable = true;
maxretry = 5;
bantime-increment = {
enable = true; # Double ban time on each attack
maxtime = "7d"; # Ban up to a week
};
};
# Disable SSH login with password, allow only keypair # Disable SSH login with password, allow only keypair
services.openssh.settings.PasswordAuthentication = false; services.openssh.settings.PasswordAuthentication = false;