diff --git a/hosts/common/optional/fail2ban.nix b/hosts/common/optional/fail2ban.nix index 5811fcc..f8048f0 100644 --- a/hosts/common/optional/fail2ban.nix +++ b/hosts/common/optional/fail2ban.nix @@ -13,6 +13,7 @@ enable = true; maxretry = 5; ignoreIP = [ + "86.173.148.116" ]; bantime-increment = { enable = true; @@ -29,6 +30,15 @@ bantime = 600; maxretry = 10; }; + nginx-botsearch.settings = { + filter = "nginx-botsearch"; + action = "iptables-allports"; + logpath = "/var/log/nginx/access.log"; + backend = "auto"; + findtime = 600; + bantime = 86400; + maxretry = 3; + }; }; }; }