Tips-Of-Mine/infrastructure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add fail2ban for traefik

Browse Source 
Remote action coming soon
This commit is contained in:
Jake Howard
2021-03-28 13:05:31 +01:00
parent 8398a2df21
commit 6973fb536f
17 changed files with 103 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/roles/base/defaults/main.yml Normal file
View File

@ -0,0 +1 @@
ssh_extra_allowed_users: ""

2
ansible/roles/base/files/sshd_config
View File

@ -2,7 +2,7 @@
# Change to a high/odd port if this server is exposed to the internet directly
Port {{ ssh_port }}
AllowUsers {% if ansible_hostname in pve_hosts %}{{ user }}@{{ pve_hosts.internal_cidr }}{% endif %} {% if ansible_hostname in nebula.clients %}{{ user }}@{{ nebula.cidr }}{% endif %}
AllowUsers {% if ansible_hostname in pve_hosts %}{{ user }}@{{ pve_hosts.internal_cidr }}{% endif %} {% if ansible_hostname in nebula.clients %}{{ user }}@{{ nebula.cidr }}{% endif %} {{ ssh_extra_allowed_users }}
# Bind to all interfaces (change to specific interface if needed)
ListenAddress 0.0.0.0