infrastructure/ansible/roles/base/files/ssh-jail.conf

[sshd]
enabled  = true
bantime  = 600
findtime = 30
maxretry = 5
port     = {{ ssh_port }},ssh
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ tailscale_cidr }}
Ensure fail2ban and logrotate are available on all machines 2020-12-27 22:39:33 +00:00			`[sshd]`
			`enabled = true`
			`bantime = 600`
			`findtime = 30`
			`maxretry = 5`
			`port = {{ ssh_port }},ssh`
Allow tailscale IP in more places 2024-02-07 18:21:16 +00:00			`ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ tailscale_cidr }}`