aboutsummaryrefslogtreecommitdiff
path: root/profiles
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2025-10-09 19:21:46 -0700
committerFranck Cuny <franck@fcuny.net>2025-10-09 19:21:46 -0700
commita0c2fdc90aefe9fc2e5d8f75eb7e7a1ef4974b2e (patch)
treeae2bbf86c8392c0722a373ae11ec20abd7201bf8 /profiles
parentmove common modules under modules/ (diff)
downloadinfra-a0c2fdc90aefe9fc2e5d8f75eb7e7a1ef4974b2e.tar.gz
more simplification of the configuration
Diffstat (limited to 'profiles')
-rw-r--r--profiles/network/fail2ban.nix15
-rw-r--r--profiles/network/firewall.nix10
-rw-r--r--profiles/network/networkd.nix19
3 files changed, 0 insertions, 44 deletions
diff --git a/profiles/network/fail2ban.nix b/profiles/network/fail2ban.nix
deleted file mode 100644
index 6aa6613..0000000
--- a/profiles/network/fail2ban.nix
+++ /dev/null
@@ -1,15 +0,0 @@
-{ ... }:
-{
- services.fail2ban = {
- enable = true;
- ignoreIP = [
- "10.100.0.0/24" # wireguard
- ];
- bantime = "1h";
- bantime-increment = {
- enable = true;
- maxtime = "168h";
- factor = "4";
- };
- };
-}
diff --git a/profiles/network/firewall.nix b/profiles/network/firewall.nix
deleted file mode 100644
index b29dc31..0000000
--- a/profiles/network/firewall.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{ ... }:
-{
- networking = {
- firewall = {
- enable = true;
- allowPing = true;
- logRefusedConnections = false;
- };
- };
-}
diff --git a/profiles/network/networkd.nix b/profiles/network/networkd.nix
deleted file mode 100644
index 928d6dc..0000000
--- a/profiles/network/networkd.nix
+++ /dev/null
@@ -1,19 +0,0 @@
-{ ... }:
-{
- networking.useNetworkd = true;
-
- systemd.network = {
- enable = true;
- };
-
- services.resolved = {
- enable = true;
- dnssec = "false";
- };
-
- # Used by systemd-resolved, not directly by resolv.conf.
- networking.nameservers = [
- "8.8.8.8#dns.google"
- "1.0.0.1#cloudflare-dns.com"
- ];
-}