fail2ban nginx-botsearch

hosts/common/optional/fail2ban.nix

@@ -13,6 +13,7 @@
     enable = true;
     maxretry = 5;
     ignoreIP = [
+      "86.173.148.116"
     ];
     bantime-increment = {
       enable = true;
@@ -29,6 +30,15 @@
         bantime = 600;
         maxretry = 10;
       };
+      nginx-botsearch.settings = {
+        filter = "nginx-botsearch";
+        action = "iptables-allports";
+        logpath = "/var/log/nginx/access.log";
+        backend = "auto";
+        findtime = 600;
+        bantime = 86400;
+        maxretry = 3;
+      };
     };
   };
 }