feat: add fail2ban and scrutiny

modules/homelab/scrutiny.nix

@@ -0,0 +1,26 @@
+{
+  config,
+  lib,
+  ...
+}:
+lib.mkIf config.fireproof.homelab.enable {
+  services.restic.backups.homelab.paths = ["/var/lib/scrutiny"];
+
+  services.scrutiny = {
+    enable = true;
+    collector.enable = true;
+    settings = {
+      web.listen.port = 8089;
+    };
+  };
+
+  services.oauth2-proxy.nginx.virtualHosts."scrutiny.nickolaj.com".allowed_groups = ["admin"];
+
+  services.nginx.virtualHosts."scrutiny.nickolaj.com" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://localhost:8089";
+    };
+  };
+}