diff --git a/modules/default.nix b/modules/default.nix index 3a0a726..a3de8be 100644 --- a/modules/default.nix +++ b/modules/default.nix @@ -13,7 +13,7 @@ in ./nextcloud.nix ./prometheus.nix # ./mjolnir.nix - # ./fail2ban.nix + ./fail2ban.nix ./email.nix # ./discord-matrix-bridge.nix ./mastodon.nix diff --git a/modules/fail2ban.nix b/modules/fail2ban.nix index d1d0bee..f91b47b 100644 --- a/modules/fail2ban.nix +++ b/modules/fail2ban.nix @@ -15,7 +15,7 @@ bantime-increment = { enable = true; # Enable increment of bantime after each violation multipliers = "1 2 4 8 16 32 64 128 256"; - maxtime = "168h"; # Do not ban for more than 1 week + maxtime = "48h"; # Do not ban for more than 1 week overalljails = true; # Calculate the bantime based on all the violations }; }; diff --git a/modules/gitea.nix b/modules/gitea.nix index 8c739a6..24e148a 100644 --- a/modules/gitea.nix +++ b/modules/gitea.nix @@ -4,8 +4,18 @@ let inherit (config.serverConfig) ports vhosts; in { - services.gitea = { + services.forgejo = { enable = true; + package = pkgs.forgejo; + + database = { + user = "gitea"; + path = "${config.services.forgejo.stateDir}/data/gitea.db"; + name = "gitea"; + }; + + dump.enable = true; + settings = { service.DISABLE_REGISTRATION = true; server = { diff --git a/specific/grimmauld-nixos-server/configuration.nix b/specific/grimmauld-nixos-server/configuration.nix index 41e77f5..f0a4582 100644 --- a/specific/grimmauld-nixos-server/configuration.nix +++ b/specific/grimmauld-nixos-server/configuration.nix @@ -9,6 +9,7 @@ networking.hostName = "grimmauld-nixos-server"; networking.domain = "grimmauld.de"; services.openssh.enable = true; + services.opensnitch.enable = lib.mkForce false; system.stateVersion = "23.11"; networking.networkmanager.enable = lib.mkForce false; boot.kernelPackages = pkgs.linuxPackages_latest;