Remotely connect to fail2ban to do ports

Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.
2021-03-28 16:06:36 +01:00
parent ac186f42e0
commit 4d218248fa
4 changed files with 24 additions and 3 deletions
--- a/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
+++ b/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
@ -1,10 +1,16 @@
 [haproxy]
 enabled  = true
 bantime  = 600
-findtime = 60
-maxretry = 15
+findtime = 10
+maxretry = 100
 filter   = haproxy-basic
 backend  = systemd
 journalmatch = _COMM=haproxy
 port     = http,https
 ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
+
+[traefik]
+enabled = true
+filter = haproxy-basic  # Not actually used
+port     = http,https
+ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}