Skip to content
This repository was archived by the owner on Aug 8, 2022. It is now read-only.

Commit 99cf0c1

Browse files
nemchiknemchik
authored
Conf adjustments and initial application setup
1 parent 302275f commit 99cf0c1

22 files changed

+124
-66
lines changed

‎Dockerfile

+2-1
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,8 @@ RUN \
1515
curl \
1616
fail2ban \
1717
fail2ban-doc \
18-
jq && \
18+
jq \
19+
nftables && \
1920
echo "**** cleanup ****" && \
2021
rm -rf \
2122
/root/.cache \

‎README.md

+44-24
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ Find us at:
4242

4343
[Fail2ban](http://www.fail2ban.org/) is a daemon to ban hosts that cause multiple authentication errors.
4444

45-
[![fail2ban](https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/fail2ban.png)](http://www.fail2ban.org/)
45+
[![fail2ban](https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/fail2ban-logo.png)](http://www.fail2ban.org/)
4646

4747
## Supported Architectures
4848

@@ -60,7 +60,27 @@ The architectures supported by this image are:
6060

6161
## Application Setup
6262

63-
App Setup Info
63+
### Configuration Files
64+
65+
On first run, the container will create a number of folders and files in `/config`. The default configurations for fail2ban are all disabled by default.
66+
67+
Please refer to the [Configuration README](https://github.com/linuxserver/docker-fail2ban/blob/master/root/defaults/fail2ban/README.md), which can be viewed in our repository, or in your config folder at `/config/fail2ban/README.md`.
68+
69+
### Chains
70+
71+
Chains affect how access is restricted. There are two primary ways to restrict access.
72+
73+
#### `DOCKER-USER`
74+
75+
The `DOCKER-USER` chain is used to restrict access to applications running in Docker containers. This will restrict access to all containers, not just the one that the jail is configured for.
76+
77+
#### `INPUT`
78+
79+
The `INPUT` chain is used to restrict access to applications running on the host. This will restrict access to the host network stack. The host network stack may not be inclusive of all Docker network stacks, thus the `DOCKER-USER` chain is used separately for applications running in Docker containers.
80+
81+
#### `FORWARD` (for older versions of Docker)
82+
83+
The `FORWARD` chain may be used on systems running older versions of Docker where the `DOCKER-USER` chain is not available.
6484

6585
## Usage
6686

@@ -154,28 +174,28 @@ Container images are configured using parameters passed at runtime (such as thos
154174
| `-e TZ=America/New_York` | Specify a timezone to use EG America/New_York |
155175
| `-v /config` | Contains all relevant configuration files. |
156176
| `-v /var/log:ro` | Host logs. Mounted as Read Only. |
157-
| `-v /remotelogs/airsonic/airsonic.log:ro` | Path to airsonic log file. Mounted as Read Only. |
158-
| `-v /remotelogs/apache2:ro` | Path to apache2 log folder. Mounted as Read Only. |
159-
| `-v /remotelogs/audit/audit.log:ro` | Path to auditd log file. Mounted as Read Only. |
160-
| `-v /remotelogs/authelia/authelia.log:ro` | Path to authelia log file. Mounted as Read Only. |
161-
| `-v /remotelogs/emby/embyserver.txt:ro` | Path to emby log file. Mounted as Read Only. |
162-
| `-v /remotelogs/exim/mainlog:ro` | Path to exim log file. Mounted as Read Only. |
163-
| `-v /remotelogs/filebrowser/filebrowser.log:ro` | Path to filebrowser log file. Mounted as Read Only. |
164-
| `-v /remotelogs/gitea/gitea.log:ro` | Path to gitea log file. Mounted as Read Only. |
165-
| `-v /remotelogs/homeassistant/home-assistant.log:ro` | Path to homeassistant log file. Mounted as Read Only. |
166-
| `-v /remotelogs/lighttpd/error.log:ro` | Path to lighttpd error log file. Mounted as Read Only. |
167-
| `-v /remotelogs/nextcloud/nextcloud.log:ro` | Path to nextcloud log file. Mounted as Read Only. |
168-
| `-v /remotelogs/nginx:ro` | Path to nginx log folder. Mounted as Read Only. |
169-
| `-v /remotelogs/nzbget/nzbget.log:ro` | Path to nzbget log file. Mounted as Read Only. |
170-
| `-v /remotelogs/overseerr/overseerr.log:ro` | Path to overseerr log file. Mounted as Read Only. |
171-
| `-v /remotelogs/prowlarr/prowlarr.txt:ro` | Path to prowlarr log file. Mounted as Read Only. |
172-
| `-v /remotelogs/radarr/radarr.txt:ro` | Path to radarr log file. Mounted as Read Only. |
173-
| `-v /remotelogs/roundcube/errors:ro` | Path to roundcube error log file. Mounted as Read Only. |
174-
| `-v /remotelogs/sabnzbd/sabnzbd.log:ro` | Path to sabnzbd log file. Mounted as Read Only. |
175-
| `-v /remotelogs/sonarr/sonarr.txt:ro` | Path to sonarr log file. Mounted as Read Only. |
176-
| `-v /remotelogs/unificontroller/server.log:ro` | Path to unificontroller server log file. Mounted as Read Only. |
177-
| `-v /remotelogs/vaultwarden/vaultwarden.log:ro` | Path to vaultwarden log file. Mounted as Read Only. |
178-
| `-v /remotelogs/vsftpd/vsftpd.log:ro` | Path to vsftpd log file. Mounted as Read Only. |
177+
| `-v /remotelogs/airsonic/airsonic.log:ro` | Optional path to airsonic log file. Mounted as Read Only. |
178+
| `-v /remotelogs/apache2:ro` | Optional path to apache2 log folder. Mounted as Read Only. |
179+
| `-v /remotelogs/audit/audit.log:ro` | Optional path to auditd log file. Mounted as Read Only. |
180+
| `-v /remotelogs/authelia/authelia.log:ro` | Optional path to authelia log file. Mounted as Read Only. |
181+
| `-v /remotelogs/emby/embyserver.txt:ro` | Optional path to emby log file. Mounted as Read Only. |
182+
| `-v /remotelogs/exim/mainlog:ro` | Optional path to exim log file. Mounted as Read Only. |
183+
| `-v /remotelogs/filebrowser/filebrowser.log:ro` | Optional path to filebrowser log file. Mounted as Read Only. |
184+
| `-v /remotelogs/gitea/gitea.log:ro` | Optional path to gitea log file. Mounted as Read Only. |
185+
| `-v /remotelogs/homeassistant/home-assistant.log:ro` | Optional path to homeassistant log file. Mounted as Read Only. |
186+
| `-v /remotelogs/lighttpd/error.log:ro` | Optional path to lighttpd error log file. Mounted as Read Only. |
187+
| `-v /remotelogs/nextcloud/nextcloud.log:ro` | Optional path to nextcloud log file. Mounted as Read Only. |
188+
| `-v /remotelogs/nginx:ro` | Optional path to nginx log folder. Mounted as Read Only. |
189+
| `-v /remotelogs/nzbget/nzbget.log:ro` | Optional path to nzbget log file. Mounted as Read Only. |
190+
| `-v /remotelogs/overseerr/overseerr.log:ro` | Optional path to overseerr log file. Mounted as Read Only. |
191+
| `-v /remotelogs/prowlarr/prowlarr.txt:ro` | Optional path to prowlarr log file. Mounted as Read Only. |
192+
| `-v /remotelogs/radarr/radarr.txt:ro` | Optional path to radarr log file. Mounted as Read Only. |
193+
| `-v /remotelogs/roundcube/errors:ro` | Optional path to roundcube error log file. Mounted as Read Only. |
194+
| `-v /remotelogs/sabnzbd/sabnzbd.log:ro` | Optional path to sabnzbd log file. Mounted as Read Only. |
195+
| `-v /remotelogs/sonarr/sonarr.txt:ro` | Optional path to sonarr log file. Mounted as Read Only. |
196+
| `-v /remotelogs/unificontroller/server.log:ro` | Optional path to unificontroller server log file. Mounted as Read Only. |
197+
| `-v /remotelogs/vaultwarden/vaultwarden.log:ro` | Optional path to vaultwarden log file. Mounted as Read Only. |
198+
| `-v /remotelogs/vsftpd/vsftpd.log:ro` | Optional path to vsftpd log file. Mounted as Read Only. |
179199

180200
## Environment variables from files (Docker secrets)
181201

‎readme-vars.yml

+44-24
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
# project information
44
project_name: fail2ban
55
project_url: "http://www.fail2ban.org/"
6-
project_logo: "https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/fail2ban.png"
6+
project_logo: "https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/fail2ban-logo.png"
77
project_blurb: |
88
[{{ project_name|capitalize }}]({{ project_url }}) is a daemon to ban hosts that cause multiple authentication errors.
99
@@ -35,33 +35,53 @@ cap_add_param_vars:
3535
# optional parameters
3636
opt_param_usage_include_vols: true
3737
opt_param_volumes:
38-
- { vol_path: "/remotelogs/airsonic/airsonic.log:ro", vol_host_path: "/path/to/airsonic/airsonic.log", desc: "Path to airsonic log file. Mounted as Read Only." }
39-
- { vol_path: "/remotelogs/apache2:ro", vol_host_path: "/path/to/apache2/log", desc: "Path to apache2 log folder. Mounted as Read Only." }
40-
- { vol_path: "/remotelogs/audit/audit.log:ro", vol_host_path: "/path/to/audit/audit.log", desc: "Path to auditd log file. Mounted as Read Only." }
41-
- { vol_path: "/remotelogs/authelia/authelia.log:ro", vol_host_path: "/path/to/authelia/authelia.log", desc: "Path to authelia log file. Mounted as Read Only." }
42-
- { vol_path: "/remotelogs/emby/embyserver.txt:ro", vol_host_path: "/path/to/emby/embyserver.txt", desc: "Path to emby log file. Mounted as Read Only." }
43-
- { vol_path: "/remotelogs/exim/mainlog:ro", vol_host_path: "/path/to/exim/mainlog", desc: "Path to exim log file. Mounted as Read Only." }
44-
- { vol_path: "/remotelogs/filebrowser/filebrowser.log:ro", vol_host_path: "/path/to/filebrowser/filebrowser.log", desc: "Path to filebrowser log file. Mounted as Read Only." }
45-
- { vol_path: "/remotelogs/gitea/gitea.log:ro", vol_host_path: "/path/to/gitea/gitea.log", desc: "Path to gitea log file. Mounted as Read Only." }
46-
- { vol_path: "/remotelogs/homeassistant/home-assistant.log:ro", vol_host_path: "/path/to/homeassistant/home-assistant.log", desc: "Path to homeassistant log file. Mounted as Read Only." }
47-
- { vol_path: "/remotelogs/lighttpd/error.log:ro", vol_host_path: "/path/to/lighttpd/error.log", desc: "Path to lighttpd error log file. Mounted as Read Only." }
48-
- { vol_path: "/remotelogs/nextcloud/nextcloud.log:ro", vol_host_path: "/path/to/nextcloud/nextcloud.log", desc: "Path to nextcloud log file. Mounted as Read Only." }
49-
- { vol_path: "/remotelogs/nginx:ro", vol_host_path: "/path/to/nginx/log", desc: "Path to nginx log folder. Mounted as Read Only." }
50-
- { vol_path: "/remotelogs/nzbget/nzbget.log:ro", vol_host_path: "/path/to/nzbget/nzbget.log", desc: "Path to nzbget log file. Mounted as Read Only." }
51-
- { vol_path: "/remotelogs/overseerr/overseerr.log:ro", vol_host_path: "/path/to/overseerr/overseerr.log", desc: "Path to overseerr log file. Mounted as Read Only." }
52-
- { vol_path: "/remotelogs/prowlarr/prowlarr.txt:ro", vol_host_path: "/path/to/prowlarr/prowlarr.txt", desc: "Path to prowlarr log file. Mounted as Read Only." }
53-
- { vol_path: "/remotelogs/radarr/radarr.txt:ro", vol_host_path: "/path/to/radarr/radarr.txt", desc: "Path to radarr log file. Mounted as Read Only." }
54-
- { vol_path: "/remotelogs/roundcube/errors:ro", vol_host_path: "/path/to/roundcube/errors", desc: "Path to roundcube error log file. Mounted as Read Only." }
55-
- { vol_path: "/remotelogs/sabnzbd/sabnzbd.log:ro", vol_host_path: "/path/to/sabnzbd/sabnzbd.log", desc: "Path to sabnzbd log file. Mounted as Read Only." }
56-
- { vol_path: "/remotelogs/sonarr/sonarr.txt:ro", vol_host_path: "/path/to/sonarr/sonarr.txt", desc: "Path to sonarr log file. Mounted as Read Only." }
57-
- { vol_path: "/remotelogs/unificontroller/server.log:ro", vol_host_path: "/path/to/unificontroller/server.log", desc: "Path to unificontroller server log file. Mounted as Read Only." }
58-
- { vol_path: "/remotelogs/vaultwarden/vaultwarden.log:ro", vol_host_path: "/path/to/vaultwarden/vaultwarden.log", desc: "Path to vaultwarden log file. Mounted as Read Only." }
59-
- { vol_path: "/remotelogs/vsftpd/vsftpd.log:ro", vol_host_path: "/path/to/vsftpd/vsftpd.log", desc: "Path to vsftpd log file. Mounted as Read Only." }
38+
- { vol_path: "/remotelogs/airsonic/airsonic.log:ro", vol_host_path: "/path/to/airsonic/airsonic.log", desc: "Optional path to airsonic log file. Mounted as Read Only." }
39+
- { vol_path: "/remotelogs/apache2:ro", vol_host_path: "/path/to/apache2/log", desc: "Optional path to apache2 log folder. Mounted as Read Only." }
40+
- { vol_path: "/remotelogs/audit/audit.log:ro", vol_host_path: "/path/to/audit/audit.log", desc: "Optional path to auditd log file. Mounted as Read Only." }
41+
- { vol_path: "/remotelogs/authelia/authelia.log:ro", vol_host_path: "/path/to/authelia/authelia.log", desc: "Optional path to authelia log file. Mounted as Read Only." }
42+
- { vol_path: "/remotelogs/emby/embyserver.txt:ro", vol_host_path: "/path/to/emby/embyserver.txt", desc: "Optional path to emby log file. Mounted as Read Only." }
43+
- { vol_path: "/remotelogs/exim/mainlog:ro", vol_host_path: "/path/to/exim/mainlog", desc: "Optional path to exim log file. Mounted as Read Only." }
44+
- { vol_path: "/remotelogs/filebrowser/filebrowser.log:ro", vol_host_path: "/path/to/filebrowser/filebrowser.log", desc: "Optional path to filebrowser log file. Mounted as Read Only." }
45+
- { vol_path: "/remotelogs/gitea/gitea.log:ro", vol_host_path: "/path/to/gitea/gitea.log", desc: "Optional path to gitea log file. Mounted as Read Only." }
46+
- { vol_path: "/remotelogs/homeassistant/home-assistant.log:ro", vol_host_path: "/path/to/homeassistant/home-assistant.log", desc: "Optional path to homeassistant log file. Mounted as Read Only." }
47+
- { vol_path: "/remotelogs/lighttpd/error.log:ro", vol_host_path: "/path/to/lighttpd/error.log", desc: "Optional path to lighttpd error log file. Mounted as Read Only." }
48+
- { vol_path: "/remotelogs/nextcloud/nextcloud.log:ro", vol_host_path: "/path/to/nextcloud/nextcloud.log", desc: "Optional path to nextcloud log file. Mounted as Read Only." }
49+
- { vol_path: "/remotelogs/nginx:ro", vol_host_path: "/path/to/nginx/log", desc: "Optional path to nginx log folder. Mounted as Read Only." }
50+
- { vol_path: "/remotelogs/nzbget/nzbget.log:ro", vol_host_path: "/path/to/nzbget/nzbget.log", desc: "Optional path to nzbget log file. Mounted as Read Only." }
51+
- { vol_path: "/remotelogs/overseerr/overseerr.log:ro", vol_host_path: "/path/to/overseerr/overseerr.log", desc: "Optional path to overseerr log file. Mounted as Read Only." }
52+
- { vol_path: "/remotelogs/prowlarr/prowlarr.txt:ro", vol_host_path: "/path/to/prowlarr/prowlarr.txt", desc: "Optional path to prowlarr log file. Mounted as Read Only." }
53+
- { vol_path: "/remotelogs/radarr/radarr.txt:ro", vol_host_path: "/path/to/radarr/radarr.txt", desc: "Optional path to radarr log file. Mounted as Read Only." }
54+
- { vol_path: "/remotelogs/roundcube/errors:ro", vol_host_path: "/path/to/roundcube/errors", desc: "Optional path to roundcube error log file. Mounted as Read Only." }
55+
- { vol_path: "/remotelogs/sabnzbd/sabnzbd.log:ro", vol_host_path: "/path/to/sabnzbd/sabnzbd.log", desc: "Optional path to sabnzbd log file. Mounted as Read Only." }
56+
- { vol_path: "/remotelogs/sonarr/sonarr.txt:ro", vol_host_path: "/path/to/sonarr/sonarr.txt", desc: "Optional path to sonarr log file. Mounted as Read Only." }
57+
- { vol_path: "/remotelogs/unificontroller/server.log:ro", vol_host_path: "/path/to/unificontroller/server.log", desc: "Optional path to unificontroller server log file. Mounted as Read Only." }
58+
- { vol_path: "/remotelogs/vaultwarden/vaultwarden.log:ro", vol_host_path: "/path/to/vaultwarden/vaultwarden.log", desc: "Optional path to vaultwarden log file. Mounted as Read Only." }
59+
- { vol_path: "/remotelogs/vsftpd/vsftpd.log:ro", vol_host_path: "/path/to/vsftpd/vsftpd.log", desc: "Optional path to vsftpd log file. Mounted as Read Only." }
6060

6161
# application setup block
6262
app_setup_block_enabled: true
6363
app_setup_block: |
64-
App Setup Info
64+
### Configuration Files
65+
66+
On first run, the container will create a number of folders and files in `/config`. The default configurations for fail2ban are all disabled by default.
67+
68+
Please refer to the [Configuration README](https://github.com/linuxserver/docker-fail2ban/blob/master/root/defaults/fail2ban/README.md), which can be viewed in our repository, or in your config folder at `/config/fail2ban/README.md`.
69+
70+
### Chains
71+
72+
Chains affect how access is restricted. There are two primary ways to restrict access.
73+
74+
#### `DOCKER-USER`
75+
76+
The `DOCKER-USER` chain is used to restrict access to applications running in Docker containers. This will restrict access to all containers, not just the one that the jail is configured for.
77+
78+
#### `INPUT`
79+
80+
The `INPUT` chain is used to restrict access to applications running on the host. This will restrict access to the host network stack. The host network stack may not be inclusive of all Docker network stacks, thus the `DOCKER-USER` chain is used separately for applications running in Docker containers.
81+
82+
#### `FORWARD` (for older versions of Docker)
83+
84+
The `FORWARD` chain may be used on systems running older versions of Docker where the `DOCKER-USER` chain is not available.
6585
6686
# changelog
6787
changelogs:

‎root/defaults/fail2ban/README.md

+21
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,27 @@ This example uses `apprise-api` for notifications, `cloudflare` for additional w
1414

1515
```ini
1616
[DEFAULT]
17+
18+
# "bantime.increment" allows to use database for searching of previously banned ip's to increase a
19+
# default ban time
20+
bantime.increment = true
21+
22+
# "bantime.maxtime" is the max number of seconds using the ban time can reach (doesn't grow further)
23+
bantime.maxtime = 5w
24+
25+
# "bantime.factor" is a coefficient to calculate exponent growing of the formula or common multiplier
26+
bantime.factor = 24
27+
28+
# "bantime" is the number of seconds that a host is banned.
29+
bantime = 1h
30+
31+
# A host is banned if it has generated "maxretry" during the last "findtime"
32+
# seconds.
33+
findtime = 24h
34+
35+
# "maxretry" is the number of failures before a host get banned.
36+
maxretry = 5
37+
1738
# Prevents banning LAN subnets
1839
ignoreip = 127.0.0.1/8 ::1
1940
10.0.0.0/8

‎root/defaults/fail2ban/jail.d/airsonic-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -6,5 +6,4 @@
66
enabled = false
77
chain = DOCKER-USER
88
port = 4040
9-
filter = airsonic-auth
109
logpath = %(remote_logs)s/airsonic/airsonic.log

‎root/defaults/fail2ban/jail.d/authelia-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -6,5 +6,4 @@
66
enabled = false
77
chain = DOCKER-USER
88
port = http,https,9091
9-
filter = authelia-auth
109
logpath = %(remote_logs)s/authelia/authelia.log

‎root/defaults/fail2ban/jail.d/emby-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -6,5 +6,4 @@
66
enabled = false
77
chain = DOCKER-USER
88
port = 8096,8920
9-
filter = emby-auth
109
logpath = %(remote_logs)s/emby/embyserver.txt

‎root/defaults/fail2ban/jail.d/filebrowser-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -11,5 +11,4 @@
1111
enabled = false
1212
chain = DOCKER-USER
1313
port = http,https
14-
filter = filebrowser-auth
1514
logpath = %(remote_logs)s/filebrowser/filebrowser.log

‎root/defaults/fail2ban/jail.d/gitea-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,5 @@
2323
enabled = false
2424
chain = DOCKER-USER
2525
port = http,https,822
26-
filter = gitea-auth
2726
logpath = %(remote_logs)s/gitea/gitea.log
2827
maxretry = 3

‎root/defaults/fail2ban/jail.d/homeassistant-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,5 @@
1313
enabled = false
1414
chain = DOCKER-USER
1515
port = 8123
16-
filter = homeassistant-auth
1716
logpath = %(remote_logs)s/homeassistant/home-assistant.log
1817
maxretry = 2

‎root/defaults/fail2ban/jail.d/nextcloud-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -12,5 +12,4 @@
1212
enabled = false
1313
chain = DOCKER-USER
1414
port = http,https
15-
filter = nextcloud-auth
1615
logpath = %(remote_logs)s/nextcloud/nextcloud.log

‎root/defaults/fail2ban/jail.d/nginx-418.conf

-1
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,5 @@
55
enabled = false
66
chain = DOCKER-USER
77
port = http,https
8-
filter = nginx-418
98
logpath = %(nginx_access_log)s
109
maxretry = 10

‎root/defaults/fail2ban/jail.d/nginx-deny.conf

-1
Original file line numberDiff line numberDiff line change
@@ -6,5 +6,4 @@
66
enabled = false
77
chain = DOCKER-USER
88
port = http,https
9-
filter = nginx-deny
109
logpath = %(nginx_error_log)s

‎root/defaults/fail2ban/jail.d/nginx-unauthorized.conf

-1
Original file line numberDiff line numberDiff line change
@@ -6,5 +6,4 @@
66
enabled = false
77
chain = DOCKER-USER
88
port = http,https
9-
filter = nginx-unauthorized
109
logpath = %(nginx_unauthorized_log)s

‎root/defaults/fail2ban/jail.d/nzbget-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -6,5 +6,4 @@
66
enabled = false
77
chain = DOCKER-USER
88
port = 6789
9-
filter = nzbget-auth
109
logpath = %(remote_logs)s/nzbget/nzbget.log

‎root/defaults/fail2ban/jail.d/overseerr-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -9,5 +9,4 @@
99
enabled = false
1010
chain = DOCKER-USER
1111
port = 5055
12-
filter = overseerr-auth
1312
logpath = %(remote_logs)s/overseerr/overseerr.log

‎root/defaults/fail2ban/jail.d/sabnzbd-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -6,5 +6,4 @@
66
enabled = false
77
chain = DOCKER-USER
88
port = 8080
9-
filter = sabnzbd-auth
109
logpath = %(remote_logs)s/sabnzbd/sabnzbd*.log

‎root/defaults/fail2ban/jail.d/sshd.conf

+9
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
# Fail2Ban jail configuration for sshd
2+
# Works OOTB with defaults
3+
4+
# chain set to INPUT to apply bans at the host level
5+
6+
[sshd]
7+
8+
enabled = false
9+
chain = INPUT

‎root/defaults/fail2ban/jail.d/unifi-controller-auth.conf

-1
Original file line numberDiff line numberDiff line change
@@ -6,5 +6,4 @@
66
enabled = false
77
chain = DOCKER-USER
88
port = 8080,8443
9-
filter = unifi-controller-auth
109
logpath = %(remote_logs)s/unificontroller/server.log

‎root/defaults/fail2ban/jail.d/unraid-sshd.conf

+2
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
# Fail2Ban jail configuration for unRAID sshd
22
# Works OOTB with defaults
33

4+
# chain set to INPUT to apply bans at the host level
5+
46
[unraid-sshd]
57

68
enabled = false

‎root/defaults/fail2ban/jail.d/unraid-webgui.conf

+2-1
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,11 @@
11
# Fail2Ban jail configuration for unRAID web GUI
22
# Works OOTB with defaults
33

4+
# chain set to INPUT to apply bans at the host level
5+
46
[unraid-webgui]
57

68
enabled = false
79
chain = INPUT
810
port = http,https
9-
filter = unraid-webgui
1011
logpath = /var/log/syslog

‎root/defaults/fail2ban/jail.d/vaultwarden-auth.conf

-2
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,4 @@
1111
enabled = false
1212
chain = DOCKER-USER
1313
port = http,https
14-
filter = vaultwarden-auth
1514
logpath = %(remote_logs)s/vaultwarden/vaultwarden.log
16-
maxretry = 3

0 commit comments

Comments
 (0)