From fd710c41f544f9e73f9f461b21ed24387cdfa6aa Mon Sep 17 00:00:00 2001
From: Chris Thompson <chris@agaric.com>
Date: Tue, 25 Feb 2025 14:18:25 -0500
Subject: [PATCH] Add fail2ban and psmisc

---
 hosts/default/configuration.nix | 3 +++
 hosts/default/home.nix          | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/hosts/default/configuration.nix b/hosts/default/configuration.nix
index ec7356c..f05e8c3 100644
--- a/hosts/default/configuration.nix
+++ b/hosts/default/configuration.nix
@@ -243,6 +243,7 @@
     rustdesk # the rustdesk remote desktop client
     vorta # borg backup UI
     ncdu # nncurses tool for examining disk usage
+    psmisc # process tools like killall
   ];
   programs.zsh.enable = true;
   programs.git = {
@@ -306,6 +307,8 @@
   services.openssh.enable = true;
   services.openssh.ports = [ 2112 ]; # must be a list...for some reason.
   services.openssh.settings.PasswordAuthentication = false;
+  services.openssh.settings.LogLevel = "VERBOSE"; # required for fail2ban to work properly
+  services.fail2ban.enable = true; # by default, the SSH jail enabled
   # Enable mobile shell (for roaming, intermittent connectivity, etc)
   programs.mosh.enable = true;
   # Enable remote desktop access via rustdesk
diff --git a/hosts/default/home.nix b/hosts/default/home.nix
index e4f5fcd..271a2a6 100644
--- a/hosts/default/home.nix
+++ b/hosts/default/home.nix
@@ -34,6 +34,8 @@
     # (pkgs.writeShellScriptBin "my-hello" ''
     #   echo "Hello, ${config.home.username}!"
     # '')
+    # Installed manually:
+    # abra - ~/.local/bin
   ];
 
   # Home Manager is pretty good at managing dotfiles. The primary way to manage