rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-01-18 17:11:39 +01:00
Code Issues Projects Releases Packages Wiki Activity

falkenstein: cleanups

Browse source
This commit is contained in:
Rouven Seifert 2024-04-01 14:25:19 +02:00
parent 0205b8b2ea
commit 1b3c8721ec
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
2 changed files with 2 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
hosts/falkenstein/modules/dns/default.nix
View file

@ -6,7 +6,7 @@ let
$ORIGIN rfive.de.
rfive.de. 86400 IN SOA ns.rfive.de. hostmaster.rfive.de. (
2024040102 ; serial
2024040103 ; serial
10800 ; refresh
3600 ; retry
604800 ; expire
@ -29,10 +29,6 @@ let
nuc A 141.30.227.6
falkenstein A 23.88.121.184
falkenstein AAAA 2a01:4f8:c012:49de::1
falkenstein SSHFP 1 1 DE42CA418093CF94EABC124E101AE4D8DE02C69F
falkenstein SSHFP 1 2 149100F5C3CA333E20E7B03EB463B0FB23D34FFE1FC65EFAADDDBE51 8EC35990
falkenstein SSHFP 4 1 70A38677DEE50C5B67AA11400A6BCD4984355C2A
falkenstein SSHFP 4 2 B25AD18A23C885AE965875C4C9EDA4E4EDFD3503334B10F0BFE7527B EB178CB2
@ MX 1 mail.rfive.de.
mail A 23.88.121.184

7
hosts/falkenstein/modules/fail2ban/default.nix
View file

@ -1,4 +1,4 @@
{ lib, ... }:
{ ... }:
{
services.fail2ban = {
enable = true;
@ -11,11 +11,6 @@
enable = true;
};
jails = {
sshd = lib.mkForce ''
enabled = true
port = ssh
filter= sshd[mode=aggressive]
'';
dovecot = ''
enabled = true
# aggressive mode add blocking for aborted connections