fireproof/nixos
1
0
Fork 0
mirror of https://github.com/nickolaj-jepsen/nixos.git synced 2026-01-22 16:16:50 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: add fail2ban and scrutiny

Browse source
This commit is contained in:
Nickolaj Jepsen 2026-01-20 23:41:10 +01:00
parent 4e8afa2dfc
commit d45f6a9359
6 changed files with 107 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

13
modules/homelab/nginx.nix
View file

@ -13,6 +13,19 @@ lib.mkIf config.fireproof.homelab.enable {
recommendedProxySettings = true;
recommendedGzipSettings = true;
recommendedBrotliSettings = true;
virtualHosts."status.localhost" = {
listen = [{ addr = "127.0.0.1"; port = 8070; }];
locations."/metrics" = {
extraConfig = ''
stub_status;
access_log off;
allow 127.0.0.1;
allow ::1;
deny all;
'';
};
};
};
security.acme = {
acceptTerms = true;