systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 17 Activity Actions

Block all ports

Browse source
This commit is contained in:
Jake Howard 2021-03-28 16:28:07 +01:00
parent 4d218248fa
commit 3c8d9fe940
Signed by: jake
GPG key ID: 57AFB45680EDD477
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
View file

@ -6,11 +6,11 @@ maxretry = 100
filter = haproxy-basic filter = haproxy-basic
backend = systemd backend = systemd
journalmatch = _COMM=haproxy journalmatch = _COMM=haproxy
port = http,https port = http,https,{{ haproxy.exposed_ports | join(",") }}
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }} ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
[traefik] [traefik]
enabled = true enabled = true
filter = haproxy-basic # Not actually used filter = haproxy-basic # Not actually used
port = http,https port = http,https,{{ haproxy.exposed_ports | join(",") }}
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }} ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}