infrastructure/ansible/roles/traefik/files/fail2ban/traefik-jail.conf

[traefik]
enabled  = true
bantime  = 6000
findtime = 300
maxretry = 5
filter   = traefik
logpath = /tmp/traefik-logs/access.log
port     = http,https
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ hosts.values()|sort|join(",") }}
action = gateway
Add fail2ban for traefik Remote action coming soon 2021-03-28 13:05:31 +01:00			`[traefik]`
			`enabled = true`
			`bantime = 6000`
Remotely connect to fail2ban to do ports Traefik can affect the edge, so blocks work there and prevent traffic hitting home network. 2021-03-28 16:06:36 +01:00			`findtime = 300`
Add fail2ban for traefik Remote action coming soon 2021-03-28 13:05:31 +01:00			`maxretry = 5`
			`filter = traefik`
			`logpath = /tmp/traefik-logs/access.log`
			`port = http,https`
Ignore my VMs from a fail2ban 2021-09-27 14:49:56 +01:00			`ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ hosts.values()\|sort\|join(",") }}`
Remotely connect to fail2ban to do ports Traefik can affect the edge, so blocks work there and prevent traffic hitting home network. 2021-03-28 16:06:36 +01:00			`action = gateway`