Open wrhight opened 8 months ago
[Related self-promotion here] I made a fail2ban rewrite that aims at being much saner to configure and faster. See nixpkgs PR / blog article / repo [/end]
In case you are interested, I'm maintaining a flake that ships the firewall bouncer at:
Project description
crowdsec-firewall-bouncer-iptables
fetches decisions using the CrowdSec API and adds them to a blocklist used by IPTables.Metadata
Add a :+1: reaction to issues you find important.
crowdsec
was added as part of https://github.com/NixOS/nixpkgs/issues/155822 but the bouncers are missing. Bouncers actually apply decisions made by the security engine, so without this package, it's not that useful.