From 10eb9095b0453cafbe30feac6eeadd8a9a1e90c6 Mon Sep 17 00:00:00 2001
From: Pyrox <pyrox@pyrox.dev>
Date: Fri, 27 Sep 2024 04:09:00 -0400
Subject: [PATCH] [systems.prefect] Add postfix and dovecot jails for fail2ban

---
 systems/x86_64-linux/prefect/services/fail2ban.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/systems/x86_64-linux/prefect/services/fail2ban.nix b/systems/x86_64-linux/prefect/services/fail2ban.nix
index 7b73b112..ae0bbc17 100644
--- a/systems/x86_64-linux/prefect/services/fail2ban.nix
+++ b/systems/x86_64-linux/prefect/services/fail2ban.nix
@@ -10,5 +10,19 @@
       "172.16.0.0/12"
       "192.168.0.0/16"
     ];
+    jails = {
+      postfix = {
+        filter = "postfix";
+        settings = {
+          action = ''nftables[port="25,465,587"]'';
+        };
+      };
+      dovecot = {
+        filter = "dovecot";
+        settings = {
+          action = ''nftables[port="25,465,587"]'';
+        };
+      };
+    };
   };
 }
-- 
2.54.0