tlaternet/tlaternet-server
1
0
Fork 0
Code Issues10 Pull requests Releases Activity

Compare commits

..

2 commits
232d84cba5 ... af76e7fe52

Author SHA1 Message Date
Tristan Daniël Maat
af76e7fe52
feat: Add crowdsec to replace fail2ban 2025-01-31 22:41:51 +08:00
Tristan Daniël Maat
fd9938af04
feat: Add crowdsec module 2025-01-31 22:41:51 +08:00
2 changed files with 2 additions and 1 deletions
modules/crowdsec
default.nix
remediations
cs-firewall-bouncer.nix

1
modules/crowdsec/default.nix
View file

@ -327,6 +327,7 @@ in
after = [ "crowdsec-setup.service" ]; after = [ "crowdsec-setup.service" ];
bindsTo = [ "crowdsec-setup.service" ]; bindsTo = [ "crowdsec-setup.service" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = { serviceConfig = {
User = "crowdsec"; User = "crowdsec";

2
modules/crowdsec/remediations/cs-firewall-bouncer.nix
View file

@ -75,7 +75,7 @@ in
after = [ "crowdsec-firewall-bouncer-setup.service" ]; after = [ "crowdsec-firewall-bouncer-setup.service" ];
bindsTo = [ "crowdsec-firewall-bouncer-setup.service" ]; bindsTo = [ "crowdsec-firewall-bouncer-setup.service" ];
partOf = [ "crowdsec.service" ]; requiredBy = [ "crowdsec.service" ];
path = path =
lib.optionals (cfg.settings.mode == "ipset" || cfg.settings.mode == "iptables") [ lib.optionals (cfg.settings.mode == "ipset" || cfg.settings.mode == "iptables") [