nixos/fail2ban: add bantime option

2023-04-19 19:18:31 +02:00
parent d32a852d2a
commit 3403ee0602
1 changed files with 10 additions and 0 deletions
@@ -78,6 +78,13 @@ in
        '';
      };

+      bantime = mkOption {
+        default = null;
+        type = types.nullOr types.str;
+        example = "10m";
+        description = lib.mdDoc "Number of seconds that a host is banned.";
+      };
+
      maxretry = mkOption {
        default = 3;
        type = types.ints.unsigned;
@@ -320,6 +327,9 @@ in
      ''}
      # Miscellaneous options
      ignoreip    = 127.0.0.1/8 ${optionalString config.networking.enableIPv6 "::1"} ${concatStringsSep " " cfg.ignoreIP}
+      ${optionalString (cfg.bantime != null) ''
+        bantime     = ${cfg.bantime}
+      ''}
      maxretry    = ${toString cfg.maxretry}
      backend     = systemd
      # Actions