From 4f9054682f8dcf6aeaf02c4558bf251005d51b45 Mon Sep 17 00:00:00 2001
From: Pyrox <pyrox@pyrox.dev>
Date: Fri, 27 Sep 2024 04:38:46 -0400
Subject: [PATCH] [systems.prefect] Refactor dovecot/postfix jails

---
 systems/x86_64-linux/prefect/services/fail2ban.nix | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/systems/x86_64-linux/prefect/services/fail2ban.nix b/systems/x86_64-linux/prefect/services/fail2ban.nix
index ae0bbc17..66389d9e 100644
--- a/systems/x86_64-linux/prefect/services/fail2ban.nix
+++ b/systems/x86_64-linux/prefect/services/fail2ban.nix
@@ -14,15 +14,25 @@
       postfix = {
         filter = "postfix";
         settings = {
-          action = ''nftables[port="25,465,587"]'';
+          action = "nftables";
+          port = "143,993";
         };
       };
       dovecot = {
         filter = "dovecot";
         settings = {
-          action = ''nftables[port="25,465,587"]'';
+          action = "nftables";
+          port = "25,465,587";
         };
       };
+      # I don't use SSHd right now, but if I do, re-enable this.
+      # sshd = {
+      #   filter = "sshd";
+      #   settings = {
+      #     action = "nftables";
+      #     port = "22";
+      #   };
+      # };
     };
   };
 }
-- 
2.54.0