[haproxy]
enabled = true
bantime = 600
findtime = 120
maxretry = 15
filter = haproxy-basic
backend = systemd
journalmatch = _COMM=haproxy
port = http,https
ignoreip = {{ wireguard.cidr }}