services: photoprism: add fail2ban rules

services/photoprism.nix

@@ -76,7 +76,7 @@ in {
           proxy_read_timeout 600;
           proxy_send_timeout 600;
           client_max_body_size 100m;
-          access_log /var/log/nginx/photoprism_access.log;
+          access_log syslog:server=unix:/dev/log,tag=photoprism;
         '';
       };
     };
@@ -98,7 +98,6 @@ in {
         filter = photoprism-failed-login
         port = http,https
         maxretry = 3
-        logpath = /var/log/nginx/photoprism_access.log
       '';
     };
 
@@ -107,6 +106,7 @@ in {
         [Definition]
         failregex = ^<HOST> -.*"POST \/api\/v1\/session HTTP[^"]*" 400 .*$
         ignoreregex =
+        journalmatch = _SYSTEMD_UNIT=nginx.service
       '';
     };
   };