From f0e5ef8970e1969dd0b7452dd5fbf8bfb5fa7b5d Mon Sep 17 00:00:00 2001
From: dawn <90008@klbr.net>
Date: Fri, 4 Sep 2026 20:22:12 +0900
Subject: [PATCH] feat(trimounts): update website source and configure fail2ban
 jail

---
 _sources/generated.json             |  8 ++++----
 _sources/generated.nix              |  8 ++++----
 hosts/trimounts/modules/website.nix | 18 ++++++++++++++++++
 3 files changed, 26 insertions(+), 8 deletions(-)

diff --git a/_sources/generated.json b/_sources/generated.json
index 8a58061..3162e85 100644
--- a/_sources/generated.json
+++ b/_sources/generated.json
@@ -42,7 +42,7 @@
     },
     "blog": {
         "cargoLock": null,
-        "date": "2026-06-16",
+        "date": "2026-09-04",
         "extract": null,
         "name": "blog",
         "passthru": null,
@@ -52,13 +52,13 @@
             "fetchSubmodules": false,
             "leaveDotGit": false,
             "name": null,
-            "rev": "3678ca2aae1020939601d5840f4f4ae588d4a649",
-            "sha256": "sha256-Uhv70rnsHftsSzCPcQQs3kZHnQ0uPlOeqVGeIkGXxZ4=",
+            "rev": "2d77e1854f2f3d2c6ffcfaca2b1305465188fb27",
+            "sha256": "sha256-HKcySxGVuqQB9ycxE1YSNaplYAj8Bf8OoD8jhLVdegc=",
             "sparseCheckout": [],
             "type": "git",
             "url": "https://tangled.org/@ptr.pet/endpoint"
         },
-        "version": "3678ca2aae1020939601d5840f4f4ae588d4a649"
+        "version": "2d77e1854f2f3d2c6ffcfaca2b1305465188fb27"
     },
     "clickee": {
         "cargoLock": null,
diff --git a/_sources/generated.nix b/_sources/generated.nix
index 15271d9..c6cc00c 100644
--- a/_sources/generated.nix
+++ b/_sources/generated.nix
@@ -34,17 +34,17 @@
   };
   blog = {
     pname = "blog";
-    version = "3678ca2aae1020939601d5840f4f4ae588d4a649";
+    version = "2d77e1854f2f3d2c6ffcfaca2b1305465188fb27";
     src = fetchgit {
       url = "https://tangled.org/@ptr.pet/endpoint";
-      rev = "3678ca2aae1020939601d5840f4f4ae588d4a649";
+      rev = "2d77e1854f2f3d2c6ffcfaca2b1305465188fb27";
       fetchSubmodules = false;
       deepClone = false;
       leaveDotGit = false;
       sparseCheckout = [ ];
-      sha256 = "sha256-Uhv70rnsHftsSzCPcQQs3kZHnQ0uPlOeqVGeIkGXxZ4=";
+      sha256 = "sha256-HKcySxGVuqQB9ycxE1YSNaplYAj8Bf8OoD8jhLVdegc=";
     };
-    date = "2026-06-16";
+    date = "2026-09-04";
   };
   clickee = {
     pname = "clickee";
diff --git a/hosts/trimounts/modules/website.nix b/hosts/trimounts/modules/website.nix
index e7d5985..15b24cc 100644
--- a/hosts/trimounts/modules/website.nix
+++ b/hosts/trimounts/modules/website.nix
@@ -87,4 +87,22 @@ in
   services.nginx.virtualHosts."gaze.systems" = {
     locations."=/".return = "301 https://ptr.pet$request_uri";
   };
+
+  environment.etc."fail2ban/filter.d/website.conf".text = ''
+    [Definition]
+    failregex = ^.*\[BAN\] Subnet <SUBNET> banned
+    ignoreregex =
+  '';
+
+  services.fail2ban.jails.website = {
+    settings = {
+      filter = "website";
+      port = "http,https";
+      banaction = "iptables-multiport";
+      journalmatch = "_SYSTEMD_UNIT=website.service";
+      maxretry = 1;
+      bantime = "24h";
+      findtime = "1h";
+    };
+  };
 }
-- 
2.51.2