diff --git a/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf b/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf index 6e059e7..2fe3fcb 100644 --- a/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf +++ b/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf @@ -6,11 +6,11 @@ maxretry = 100 filter = haproxy-basic backend = systemd journalmatch = _COMM=haproxy -port = http,https +port = http,https,{{ haproxy.exposed_ports | join(",") }} ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }} [traefik] enabled = true filter = haproxy-basic # Not actually used -port = http,https +port = http,https,{{ haproxy.exposed_ports | join(",") }} ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}