systems/infrastructure
1
Fork 0
Code Issues 1 Pull Requests 13 Actions Activity

Block all ports

Browse Source
This commit is contained in:
Jake Howard 2021-03-28 16:28:07 +01:00
parent 4d218248fa
commit 3c8d9fe940
Signed by: jake
GPG Key ID: 57AFB45680EDD477
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
View File

@ -6,11 +6,11 @@ maxretry = 100
filter = haproxy-basic
backend = systemd
journalmatch = _COMM=haproxy
port = http,https
port = http,https,{{ haproxy.exposed_ports | join(",") }}
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
[traefik]
enabled = true
filter = haproxy-basic # Not actually used
port = http,https
port = http,https,{{ haproxy.exposed_ports | join(",") }}
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}