aboutsummaryrefslogtreecommitdiff
path: root/profiles
diff options
context:
space:
mode:
Diffstat (limited to 'profiles')
-rw-r--r--profiles/network/fail2ban.nix15
-rw-r--r--profiles/network/firewall.nix10
-rw-r--r--profiles/network/networkd.nix19
3 files changed, 0 insertions, 44 deletions
diff --git a/profiles/network/fail2ban.nix b/profiles/network/fail2ban.nix
deleted file mode 100644
index 6aa6613..0000000
--- a/profiles/network/fail2ban.nix
+++ /dev/null
@@ -1,15 +0,0 @@
-{ ... }:
-{
- services.fail2ban = {
- enable = true;
- ignoreIP = [
- "10.100.0.0/24" # wireguard
- ];
- bantime = "1h";
- bantime-increment = {
- enable = true;
- maxtime = "168h";
- factor = "4";
- };
- };
-}
diff --git a/profiles/network/firewall.nix b/profiles/network/firewall.nix
deleted file mode 100644
index b29dc31..0000000
--- a/profiles/network/firewall.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{ ... }:
-{
- networking = {
- firewall = {
- enable = true;
- allowPing = true;
- logRefusedConnections = false;
- };
- };
-}
diff --git a/profiles/network/networkd.nix b/profiles/network/networkd.nix
deleted file mode 100644
index 928d6dc..0000000
--- a/profiles/network/networkd.nix
+++ /dev/null
@@ -1,19 +0,0 @@
-{ ... }:
-{
- networking.useNetworkd = true;
-
- systemd.network = {
- enable = true;
- };
-
- services.resolved = {
- enable = true;
- dnssec = "false";
- };
-
- # Used by systemd-resolved, not directly by resolv.conf.
- networking.nameservers = [
- "8.8.8.8#dns.google"
- "1.0.0.1#cloudflare-dns.com"
- ];
-}