feat(bomba): add actual

machines/bomba/services/fail2ban.nix

@@ -1,4 +1,4 @@
-{ lib, ... }:
+{ ... }:
 {
   services.fail2ban = {
     enable = true;
@@ -9,26 +9,5 @@
       multipliers = "1 2 4 8 16 32 64";
       overalljails = true;
     };
-    jails = {
-      caddy-filter.settings = {
-        enabled = true;
-        port = "http,https";
-	action = "iptables-multiport";
-        filter = "caddy-filter";
-        logpath = "/var/log/caddy/*.log";
-        maxretry = 8;
-	backend = "auto";
-      };
-    };
-  };
-
-  environment.etc = {
-    "fail2ban/filter.d/caddy-filter.local".text = lib.mkDefault (
-      lib.mkAfter ''
-        [Definition]
-        failregex = ^\{"level":"info","ts":\d+\.\d+,"logger":"http\.log\.access\.log\d*","msg":"handled request".*"remote_ip":"<HOST>".*"status":4\d{2}.*
-        ignoreregex =
-      ''
-    );
   };
 }