Commit Graph

27 Commits

Author SHA1 Message Date
4d218248fa Remotely connect to fail2ban to do ports
Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.
2021-03-28 16:06:36 +01:00
5084bfecdf Ignore PVE interface from f2b jails 2021-03-24 22:35:28 +00:00
f7a0877e72 Exclude nebula from fail2ban 2021-02-14 11:39:01 +00:00
385917ba4e Decrease find time
Hopefully reduce false-positive catches
2021-02-14 11:22:32 +00:00
c38ecfebd7 Update gateway to point to ingress instance 2021-01-09 18:17:54 +00:00
b2e91d7d6d Update haproxy fail2ban jail to use systemd for logs 2020-10-16 19:16:42 +01:00
4890c3d3e5 Revert "Remove fail2ban"
This reverts commit 1f0e33acc8.
2020-10-16 19:16:42 +01:00
29c9e14f62 Remove haproxy chroot
This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future
2020-10-05 11:10:29 +01:00
dd12b795b5 Remove pihole
Internal VPN server is working just perfectly instead
2020-06-24 18:46:13 +01:00
1f0e33acc8 Remove fail2ban
Keeps getting hit by stats. I should fix that at some point
2020-05-09 20:09:36 +01:00
f3126e34b9 Update haproxy config for use on arch 2020-05-09 20:08:27 +01:00
ff8beea3c4 Massively increase timeouts to prevent websocket issues 2020-04-17 23:04:20 +01:00
1da3ca95e7 Stop using unstable repos to install wireguard
It's in backports now, which is much easier to install from!
2020-04-17 09:08:10 +01:00
f32e0bfe59 Only add timeout for core HTTP ports 2020-03-31 19:27:47 +01:00
cdcfcf3c66 Increase fail2ban threshold 2020-03-15 15:02:57 +00:00
708250005a Install fail2ban 2020-03-13 23:08:26 +00:00
92af315e69 Change haproxy timeouts 2020-03-13 22:26:30 +00:00
b4bb3f01f2 Convert haproxy config to use spaces 2020-01-26 18:17:55 +00:00
ac5a9aa0f0 Remove SSL block from haproxy config 2020-01-26 18:15:19 +00:00
af936990e2 Add custom DNS server 2020-01-23 20:06:45 +00:00
ec478c3cf5 Fix client config 2020-01-19 17:59:36 +00:00
251fe11113 Output wireguard client config files 2020-01-19 16:43:51 +00:00
f6ffb1ceef Template haproxy better 2020-01-17 22:56:45 +00:00
78fa36f20a Move variables to 1 place
Much easier to manage
2020-01-17 22:31:50 +00:00
23a472f764 Add wireguard server config 2019-12-08 21:05:20 +00:00
730246e67f Install wireguard server 2019-12-08 20:16:42 +00:00
58a3683355 Define haproxy config 2019-12-08 16:47:28 +00:00