infrastructure/ansible/roles/traefik/files/fail2ban/traefik-jail.conf

[traefik]
enabled  = true
bantime  = 6000
findtime = 300
maxretry = 5
filter   = traefik
logpath = /tmp/traefik-logs/access.log
port     = http,https
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ vps_hosts.values()|sort|join(",") }},{{ tailscale_cidr }}
action = gateway
Add fail2ban for traefik Remote action coming soon 2021-03-28 13:05:31 +01:00			`[traefik]`
			`enabled = true`
			`bantime = 6000`
Remotely connect to fail2ban to do ports Traefik can affect the edge, so blocks work there and prevent traffic hitting home network. 2021-03-28 16:06:36 +01:00			`findtime = 300`
Add fail2ban for traefik Remote action coming soon 2021-03-28 13:05:31 +01:00			`maxretry = 5`
			`filter = traefik`
			`logpath = /tmp/traefik-logs/access.log`
			`port = http,https`
Allow tailscale IP in more places 2024-02-07 18:21:16 +00:00			`ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ vps_hosts.values()\|sort\|join(",") }},{{ tailscale_cidr }}`
Remotely connect to fail2ban to do ports Traefik can affect the edge, so blocks work there and prevent traffic hitting home network. 2021-03-28 16:06:36 +01:00			`action = gateway`