infrastructure/ansible/roles/base/files/ssh-jail.conf

[sshd]
enabled  = true
bantime  = 600
findtime = 30
maxretry = 5
port     = {{ ssh_port }},ssh
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}
Ensure fail2ban and logrotate are available on all machines 2020-12-27 22:39:33 +00:00			`[sshd]`
			`enabled = true`
			`bantime = 600`
			`findtime = 30`
			`maxretry = 5`
			`port = {{ ssh_port }},ssh`
Exclude nebula from fail2ban 2021-02-14 11:39:01 +00:00			`ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}`