Enable fail2ban in apex login node

We are seeing a lot of failed attempts from the same IPs:

    apex% sudo journalctl -u sshd -b0 | grep 'Failed password' | wc -l
    2441

Reviewed-by: Aleix Boné <abonerib@bsc.es>
This commit is contained in:
2025-11-20 15:17:06 +01:00
parent a173af654f
commit aa16bfc0bc

View File

@@ -57,6 +57,8 @@
}; };
}; };
services.fail2ban.enable = true;
networking.firewall = { networking.firewall = {
extraCommands = '' extraCommands = ''
# Blackhole BSC vulnerability scanner (OpenVAS) as it is spamming our # Blackhole BSC vulnerability scanner (OpenVAS) as it is spamming our