Tips-Of-Mine/infrastructure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remotely connect to fail2ban to do ports

Browse Source 
Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.
This commit is contained in:
Jake Howard
2021-03-28 16:06:36 +01:00
parent ac186f42e0
commit 4d218248fa
4 changed files with 24 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ansible/roles/traefik/files/fail2ban/remote-action.conf Normal file
View File

@ -0,0 +1,6 @@
[Definition]
actionban = ssh -p 7743 f2b@{{ nebula.clients.casey.ip }} -i /root/.ssh/f2b/id_ed25519 set traefik banip <ip>
actionunban = ssh -p 7743 f2b@{{ nebula.clients.casey.ip }} -i /root/.ssh/f2b/id_ed25519 set traefik unbanip <ip>
actioncheck =
actionstart =
actionstop =

3
ansible/roles/traefik/files/fail2ban/traefik-jail.conf
View File

@ -1,9 +1,10 @@
[traefik]
enabled = true
bantime = 6000
findtime = 600
findtime = 300
maxretry = 5
filter = traefik
logpath = /tmp/traefik-logs/access.log
port = http,https
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
action = gateway