From 98f7f15ae078e04f8c59d1d1f971a48defb8da6a Mon Sep 17 00:00:00 2001
From: ppom <>
Date: Fri, 26 May 2023 13:53:59 +0200
Subject: [PATCH] Update presentation

---
 README.md               | 16 +++++++++++++---
 config/reaction.service |  3 +--
 2 files changed, 14 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index b6f8684..e7580b7 100644
--- a/README.md
+++ b/README.md
@@ -1,13 +1,13 @@
 # reaction
 
-🚧 this program has not been tested in production yet 🚧
-
 a program that scans program outputs, such as logs,
 for repeated patterns, such as failed login attempts,
 and takes action, such as banning ips.
 
 (adapted from [fail2ban](http://fail2ban.org)'s presentation 😄)
 
+🚧 this program hasn't received external audit. however, it already works well on my servers 🚧
+
 ## rationale
 
 i was using fail2ban since quite a long time, but i was a bit frustrated by it's cpu consumption
@@ -57,7 +57,6 @@ ExecStart=/path/to/reaction -c /etc/reaction.yml
 ExecStartPre=/path/to/iptables -w -N reaction
 ExecStartPre=/path/to/iptables -w -A reaction -j ACCEPT
 ExecStartPre=/path/to/iptables -w -I reaction 1 -s 127.0.0.1 -j ACCEPT
-ExecStartPre=/path/to/iptables -w -I reaction 1 -s ::1 -j ACCEPT
 ExecStartPre=/path/to/iptables -w -I INPUT -p all -j reaction
 
 ExecStopPost=/path/to/iptables -w -D INPUT -p all -j reaction
@@ -92,3 +91,14 @@ the socket allowing communication between the cli and server will be created at
 ```shell
 $ go build .
 ```
+
+### nixos
+
+in addition to the [package](https://framagit.org/ppom/nixos/-/blob/cf5448b21ae3386265485308a6cd077e8068ad77/pkgs/reaction/default.nix)
+and [module](https://framagit.org/ppom/nixos/-/blob/cf5448b21ae3386265485308a6cd077e8068ad77/modules/common/reaction.nix)
+that i didn't tried to upstream to nixpkgs yet (although they are ready), i use extensively reaction on my servers. if you're using nixos,
+consider reading and building upon [my own building blocks](https://framagit.org/ppom/nixos/-/blob/cf5448b21ae3386265485308a6cd077e8068ad77/modules/common/reaction-variables.nix),
+[my own non-root reaction conf, including conf for SSH, port scanning & Nginx common attack URLS](https://framagit.org/ppom/nixos/-/blob/cf5448b21ae3386265485308a6cd077e8068ad77/modules/common/reaction-custom.nix),
+and the configuration for [nextcloud](https://framagit.org/ppom/nixos/-/blob/cf5448b21ae3386265485308a6cd077e8068ad77/modules/musi/file.ppom.me.nix#L53),
+[vaultwarden](https://framagit.org/ppom/nixos/-/blob/cf5448b21ae3386265485308a6cd077e8068ad77/modules/musi/vaultwarden.nix#L45),
+and [maddy](https://framagit.org/ppom/nixos/-/blob/cf5448b21ae3386265485308a6cd077e8068ad77/modules/musi/mail.nix#L74). see also an [example](https://framagit.org/ppom/nixos/-/blob/cf5448b21ae3386265485308a6cd077e8068ad77/modules/musi/mail.nix#L85) where it does something else than banning IPs.
diff --git a/config/reaction.service b/config/reaction.service
index 49513e0..3b74f8e 100644
--- a/config/reaction.service
+++ b/config/reaction.service
@@ -10,9 +10,8 @@ ExecStart=/path/to/reaction -c /etc/reaction.yml
 ExecStartPre=/path/to/iptables -w -N reaction
 # Set its default to ACCEPT
 ExecStartPre=/path/to/iptables -w -A reaction -j ACCEPT
-# Always accept 127.0.0.1 && ::1
+# Always accept 127.0.0.1
 ExecStartPre=/path/to/iptables -w -I reaction 1 -s 127.0.0.1 -j ACCEPT
-ExecStartPre=/path/to/iptables -w -I reaction 1 -s ::1 -j ACCEPT
 # Insert this chain as the first item of the INPUT chain (for incoming connections)
 ExecStartPre=/path/to/iptables -w -I INPUT -p all -j reaction