sapphic.moe
+2
-1
services/fail2ban/default.nix
+2
-1
services/fail2ban/default.nix
···
102
102
# Report IP to AbuseIPDB, reading API key from Agenix secret file
103
103
# Based on official fail2ban abuseipdb.conf but with API key from Agenix
104
104
# Note: Must be on single line (no backslash continuation) for INI parser
105
-
actionban = curl --fail 'https://api.abuseipdb.com/api/v2/report' -H 'Accept: application/json' -H 'Key: $(cat /run/agenix/abuseipdb)' --data-urlencode 'ip=<ip>' --data-urlencode 'comment=<matches>' --data 'categories=<abuseipdb_category>'
105
+
# Rate limiting: sleep briefly before reporting to avoid 429 Too Many Requests
106
+
actionban = sleep 5; curl --fail 'https://api.abuseipdb.com/api/v2/report' -H 'Accept: application/json' -H 'Key: $(cat /run/agenix/abuseipdb)' --data-urlencode 'ip=<ip>' --data-urlencode 'comment=<matches>' --data 'categories=<abuseipdb_category>'
106
107
107
108
actionstart =
108
109
actionstop =