Remotely connect to fail2ban to do ports

Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.
2021-03-28 16:06:36 +01:00
parent ac186f42e0
commit 4d218248fa
4 changed files with 24 additions and 3 deletions
--- a/ansible/roles/traefik/files/fail2ban/traefik-jail.conf
+++ b/ansible/roles/traefik/files/fail2ban/traefik-jail.conf
@ -1,9 +1,10 @@
 [traefik]
 enabled  = true
 bantime  = 6000
-findtime = 600
+findtime = 300
 maxretry = 5
 filter   = traefik
 logpath = /tmp/traefik-logs/access.log
 port     = http,https
 ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
+action = gateway