feat: Added tako

nixos/tako/services/fail2ban.nix

@@ -0,0 +1,22 @@
+{...}: {
+  # sops = {
+  #   secrets."ryu/public" = {};
+  # };
+  services = {
+    fail2ban = {
+      enable = true;
+      bantime = "24h"; # Ban IPs for one day on the first ban
+      bantime-increment = {
+        enable = true; # Enable increment of bantime after each violation
+        # formula = "ban.Time * math.exp(float(ban.Count+1)*banFactor)/math.exp(1*banFactor)";
+        multipliers = "1 2 4 8 16 32 64";
+        maxtime = "168h"; # Do not ban for more than 1 week
+        overalljails = true; # Calculate the bantime based on all the violations
+      };
+      # I'm beind a CG-NAT
+      ignoreIP = [
+        "106.219.121.52"
+      ];
+    };
+  };
+}