fail2ban test

hosts/sobotka/modules.nix

@@ -128,8 +128,8 @@
     services = {
       agenix = {
         enable = true;
-        kima = {
-          enable = false;
+        sobotka = {
+          enable = true;
         };
       };
       blueman = {

hosts/sobotka/server.nix

@@ -1,10 +1,15 @@
-{
+{config, ...}: {
   server = {
     email = "adam@cnst.dev";
     domain = "cnst.dev";
     caddy = {
       enable = true;
     };
+    cfFail2ban = {
+      enable = true;
+      apiKeyFile = config.age.secrets.cloudflareFirewallApiKey.path;
+      zoneId = "0027acdfb8bbe010f55b676ad8698dfb";
+    };
     vaultwarden = {
       enable = true;
     };