SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 14:01:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

crowdsec: Auto enable sources when appropriate

Browse source
This commit is contained in:
SebastianStork 2025-11-09 21:41:30 +01:00
parent c9f05a040e
commit 59d2a732a0
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q
2 changed files with 9 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

5
hosts/srv-public/default.nix
View file

@ -36,11 +36,6 @@
crowdsec = { crowdsec = {
enable = true; enable = true;
sources = {
iptables = true;
sshd = true;
caddy = true;
};
bouncers.firewall = true; bouncers.firewall = true;
}; };

12
modules/system/services/crowdsec/default.nix
View file

@ -24,9 +24,15 @@ in
default = 6060; default = 6060;
}; };
sources = { sources = {
iptables = lib.mkEnableOption ""; iptables = lib.mkEnableOption "" // {
caddy = lib.mkEnableOption ""; default = true;
sshd = lib.mkEnableOption ""; };
caddy = lib.mkEnableOption "" // {
default = config.services.caddy.enable;
};
sshd = lib.mkEnableOption "" // {
default = config.services.openssh.enable;
};
}; };
}; };