infrastructure/ansible/roles/base/files/ssh-jail.conf

[sshd]
enabled  = true
bantime  = 600
findtime = 30
maxretry = 5
port     = {{ ssh_port }},ssh
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ pve_hosts.internal_cidr_ipv6 }},{{ tailscale_cidr }}
Ensure fail2ban and logrotate are available on all machines 2020-12-27 22:39:33 +00:00			`[sshd]`
			`enabled = true`
			`bantime = 600`
			`findtime = 30`
			`maxretry = 5`
			`port = {{ ssh_port }},ssh`
Add IPv6 to proxmox internal network 2024-04-20 18:00:08 +01:00			`ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ pve_hosts.internal_cidr_ipv6 }},{{ tailscale_cidr }}`