summary refs log tree commit diff stats
diff options
context:
space:
mode:
-rw-r--r--system/services/fail2ban/default.nix15
1 files changed, 8 insertions, 7 deletions
diff --git a/system/services/fail2ban/default.nix b/system/services/fail2ban/default.nix
index 43fd674..66207e6 100644
--- a/system/services/fail2ban/default.nix
+++ b/system/services/fail2ban/default.nix
@@ -2,13 +2,14 @@
   services.fail2ban = {
     enable = true;
     maxretry = 2; # ban after 2 failures
-    daemonConfig = ''
-      [Definition]
-      logtarget = SYSLOG
-      socket    = /run/fail2ban/fail2ban.sock
-      pidfile   = /run/fail2ban/fail2ban.pid
-      dbfile    = /var/lib/fail2ban/db.sqlite3
-    '';
+    daemonSettings = {
+      Definition = {
+        logtarget = "SYSLOG";
+        socket = "/run/fail2ban/fail2ban.sock";
+        pidfile = "/run/fail2ban/fail2ban.pid";
+        dbfile = "/var/lib/fail2ban/db.sqlite3";
+      };
+    };
     bantime-increment = {
       enable = true;
       rndtime = "8m";