···

       
91
       
91
       
 
       
        description = ''

     

       
92
       
92
       
 
       
          Whether to enable the fail2ban service.

     

       
93
       
93
       
 
       


     

       
94
       
94
       
-
       
          See the documentation of {option}`services.fail2ban.jails`

     

       
94
       
94
       
+
       
          See the documentation of [](#opt-services.fail2ban.jails)

     

       
95
       
95
       
 
       
          for what jails are enabled by default.

     

       
96
       
96
       
 
       
        '';

     

       
97
       
97
       
 
       
      };

     
···

       
326
       
326
       
 
       


     

       
327
       
327
       
 
       
          NixOS comes with a default `sshd` jail;

     

       
328
       
328
       
 
       
          for it to work well,

     

       
329
       
329
       
-
       
          {option}`services.openssh.logLevel` should be set to

     

       
329
       
329
       
+
       
          [](#opt-services.openssh.settings.LogLevel) should be set to

     

       
330
       
330
       
 
       
          `"VERBOSE"` or higher so that fail2ban

     

       
331
       
331
       
 
       
          can observe failed login attempts.

     

       
332
       
332
       
 
       
          This module sets it to `"VERBOSE"` if