Added hetzner server configs

2026-07-11 20:28:51 +02:00
parent 0457d618e1
commit c5f771bd53
51 changed files with 1800 additions and 309 deletions
@@ -0,0 +1,27 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  # Keep fail2ban as OCI container to preserve the web UI
+  virtualisation.oci-containers.containers.fail2ban = {
+    image = "crazymax/fail2ban:latest";
+    autoStart = true;
+    volumes = [
+      "/home/admin/dms/mail-logs:/var/log/mail:ro"
+      "/home/admin/fail2ban/data:/data:Z"
+    ];
+    environment = {
+      TZ = "Europe/Amsterdam";
+    };
+    extraOptions = [
+      "--network=host"
+      "--cap-add=NET_ADMIN"
+    ];
+  };
+
+  systemd.tmpfiles.rules = [
+    "d /var/log/mail 0755 root root -"
+  ];
+}