Merge pull request #82801 from Izorkin/fail2ban

nixos/fail2ban: add warning if work fail2ban without firewall
2020-03-22 08:31:50 +00:00 · 2020-03-22 08:31:50 +00:00 · 2edf67b62f
commit 2edf67b62f
parent bb9cf0f369 c75398b10a
1 changed files with 4 additions and 0 deletions
--- a/nixos/modules/services/security/fail2ban.nix
+++ b/nixos/modules/services/security/fail2ban.nix
@ -216,6 +216,10 @@ in

  config = mkIf cfg.enable {

+    warnings = mkIf (config.networking.firewall.enable == false || config.networking.nftables.enable == false) [
+      "fail2ban can not be used without a firewall"
+    ];
+
    environment.systemPackages = [ cfg.package ];

    environment.etc = {