fail2ban test

2025-07-16 14:07:14 +02:00
parent 26bd1b3487
commit 4116a0e557
10 changed files with 165 additions and 19 deletions
--- a/hosts/sobotka/server.nix
+++ b/hosts/sobotka/server.nix
@@ -1,10 +1,15 @@
-{
+{config, ...}: {
  server = {
    email = "adam@cnst.dev";
    domain = "cnst.dev";
    caddy = {
      enable = true;
    };
+    cfFail2ban = {
+      enable = true;
+      apiKeyFile = config.age.secrets.cloudflareFirewallApiKey.path;
+      zoneId = "0027acdfb8bbe010f55b676ad8698dfb";
+    };
    vaultwarden = {
      enable = true;
    };