From a0c2fdc90aefe9fc2e5d8f75eb7e7a1ef4974b2e Mon Sep 17 00:00:00 2001 From: Franck Cuny Date: Thu, 9 Oct 2025 19:21:46 -0700 Subject: more simplification of the configuration --- profiles/network/fail2ban.nix | 15 --------------- profiles/network/firewall.nix | 10 ---------- profiles/network/networkd.nix | 19 ------------------- 3 files changed, 44 deletions(-) delete mode 100644 profiles/network/fail2ban.nix delete mode 100644 profiles/network/firewall.nix delete mode 100644 profiles/network/networkd.nix (limited to 'profiles/network') diff --git a/profiles/network/fail2ban.nix b/profiles/network/fail2ban.nix deleted file mode 100644 index 6aa6613..0000000 --- a/profiles/network/fail2ban.nix +++ /dev/null @@ -1,15 +0,0 @@ -{ ... }: -{ - services.fail2ban = { - enable = true; - ignoreIP = [ - "10.100.0.0/24" # wireguard - ]; - bantime = "1h"; - bantime-increment = { - enable = true; - maxtime = "168h"; - factor = "4"; - }; - }; -} diff --git a/profiles/network/firewall.nix b/profiles/network/firewall.nix deleted file mode 100644 index b29dc31..0000000 --- a/profiles/network/firewall.nix +++ /dev/null @@ -1,10 +0,0 @@ -{ ... }: -{ - networking = { - firewall = { - enable = true; - allowPing = true; - logRefusedConnections = false; - }; - }; -} diff --git a/profiles/network/networkd.nix b/profiles/network/networkd.nix deleted file mode 100644 index 928d6dc..0000000 --- a/profiles/network/networkd.nix +++ /dev/null @@ -1,19 +0,0 @@ -{ ... }: -{ - networking.useNetworkd = true; - - systemd.network = { - enable = true; - }; - - services.resolved = { - enable = true; - dnssec = "false"; - }; - - # Used by systemd-resolved, not directly by resolv.conf. - networking.nameservers = [ - "8.8.8.8#dns.google" - "1.0.0.1#cloudflare-dns.com" - ]; -} -- cgit v1.2.3