Fix fail2ban

kip93 · Dec 2, 2023 · f753cc8 · f753cc8
1 parent 5fd3478
commit f753cc8
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/modules/ssh/default.nix b/modules/ssh/default.nix
@@ -56,7 +56,9 @@ in
       # Be a bit more lenient by default (not much of an issue without password
       # auths).
       maxretry = 20;
-      bantime = null; # Ban forever
+      # Ban for ever increasing times
+      bantime = "1h";
+      bantime-increment = { enable = true; rndtime = "5m"; };
     };
   };
 }