modules/fail2ban: switch to submodule style

2023-12-02 01:12:26 +01:00 · 2023-12-02 01:12:26 +01:00 · d378ff9d06
commit d378ff9d06
parent f973ca2084
1 changed files with 1 additions and 5 deletions
--- a/modules/fail2ban/default.nix
+++ b/modules/fail2ban/default.nix
@ -3,11 +3,7 @@
  services.fail2ban = {
    enable = true;
    banaction = "iptables-multiport[blocktype=DROP]";
-    jails.sshd = ''
-      enabled = true
-      port = 22
-      mode = aggressive
-    '';
+    jails.sshd.settings.mode = "aggressive";
    ignoreIP = [
      "10.0.0.0/8"
      depot.reflection.interfaces.primary.addr