summary refs log tree commit diff
path: root/nixos/doc/manual
diff options
context:
space:
mode:
authorIzorkin <izorkin@elven.pw>2023-04-17 22:02:51 +0300
committerpennae <82953136+pennae@users.noreply.github.com>2023-05-03 08:45:26 +0200
commit544ebba97367ac0708c673326ef4e11f8459baad (patch)
treedf0b4edeaf5e6f95bf5b6603cb890321a9fc25a6 /nixos/doc/manual
parent1496fc0a7003c2b090d20360f05a7e3449933243 (diff)
nixos/fail2ban: update bantime options
Diffstat (limited to 'nixos/doc/manual')
-rw-r--r--nixos/doc/manual/release-notes/rl-2305.section.md2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2305.section.md b/nixos/doc/manual/release-notes/rl-2305.section.md
index d5f449afd8e84..e937f756991a0 100644
--- a/nixos/doc/manual/release-notes/rl-2305.section.md
+++ b/nixos/doc/manual/release-notes/rl-2305.section.md
@@ -257,6 +257,8 @@ In addition to numerous new and upgraded packages, this release has the followin
 
 - To enable the HTTP3 (QUIC) protocol for a nginx virtual host, set the `quic` attribute on it to true, e.g. `services.nginx.virtualHosts.<name>.quic = true;`.
 
+- In `services.fail2ban`, `bantime-increment.<name>` options now default to `null` (except `bantime-increment.enable`) and are used to set the corresponding option in `jail.local` only if not `null`. Also, enforce that `bantime-increment.formula` and `bantime-increment.multipliers` are not both specified.
+
 - The default Asterisk package was changed to v20 from v19. Asterisk versions 16 and 19 have been dropped due to being EOL. You may need to update /var/lib/asterisk to match the template files in `${asterisk-20}/var/lib/asterisk`.
 
 - conntrack helper autodetection has been removed from kernels 6.0 and up upstream, and an assertion was added to ensure things don't silently stop working. Migrate your configuration to assign helpers explicitly or use an older LTS kernel branch as a temporary workaround.