diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-10-09 19:21:46 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-10-09 19:21:46 -0700 |
| commit | a0c2fdc90aefe9fc2e5d8f75eb7e7a1ef4974b2e (patch) | |
| tree | ae2bbf86c8392c0722a373ae11ec20abd7201bf8 /profiles | |
| parent | move common modules under modules/ (diff) | |
| download | infra-a0c2fdc90aefe9fc2e5d8f75eb7e7a1ef4974b2e.tar.gz | |
more simplification of the configuration
Diffstat (limited to 'profiles')
| -rw-r--r-- | profiles/network/fail2ban.nix | 15 | ||||
| -rw-r--r-- | profiles/network/firewall.nix | 10 | ||||
| -rw-r--r-- | profiles/network/networkd.nix | 19 |
3 files changed, 0 insertions, 44 deletions
diff --git a/profiles/network/fail2ban.nix b/profiles/network/fail2ban.nix deleted file mode 100644 index 6aa6613..0000000 --- a/profiles/network/fail2ban.nix +++ /dev/null @@ -1,15 +0,0 @@ -{ ... }: -{ - services.fail2ban = { - enable = true; - ignoreIP = [ - "10.100.0.0/24" # wireguard - ]; - bantime = "1h"; - bantime-increment = { - enable = true; - maxtime = "168h"; - factor = "4"; - }; - }; -} diff --git a/profiles/network/firewall.nix b/profiles/network/firewall.nix deleted file mode 100644 index b29dc31..0000000 --- a/profiles/network/firewall.nix +++ /dev/null @@ -1,10 +0,0 @@ -{ ... }: -{ - networking = { - firewall = { - enable = true; - allowPing = true; - logRefusedConnections = false; - }; - }; -} diff --git a/profiles/network/networkd.nix b/profiles/network/networkd.nix deleted file mode 100644 index 928d6dc..0000000 --- a/profiles/network/networkd.nix +++ /dev/null @@ -1,19 +0,0 @@ -{ ... }: -{ - networking.useNetworkd = true; - - systemd.network = { - enable = true; - }; - - services.resolved = { - enable = true; - dnssec = "false"; - }; - - # Used by systemd-resolved, not directly by resolv.conf. - networking.nameservers = [ - "8.8.8.8#dns.google" - "1.0.0.1#cloudflare-dns.com" - ]; -} |
