Replace edge proxy with nginx

The config makes more sense, and it has more of the features I need, which will come later.
2021-08-22 22:34:27 +01:00
parent 23fc7bbb12
commit a54d373526
10 changed files with 96 additions and 98 deletions
--- a/ansible/roles/gateway/files/nginx-fail2ban-jail.conf
+++ b/ansible/roles/gateway/files/nginx-fail2ban-jail.conf
@ -0,0 +1,14 @@
+[nginx]
+enabled  = true
+bantime  = 600
+findtime = 10
+maxretry = 100
+filter   = nginx-tcp
+logpath  = /var/log/nginx/ips.log
+port     = http,https,8448
+ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
+
+[traefik]
+enabled = true
+port     = http,https,8448
+ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}