systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 16 Activity Actions

Ignore PVE interface from f2b jails

Browse source
This commit is contained in:
Jake Howard 2021-03-24 22:35:28 +00:00
parent f436e4660b
commit 5084bfecdf
Signed by: jake
GPG key ID: 57AFB45680EDD477
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ansible/roles/base/files/ssh-jail.conf
View file

@ -4,4 +4,4 @@ bantime = 600
findtime = 30 findtime = 30
maxretry = 5 maxretry = 5
port = {{ ssh_port }},ssh port = {{ ssh_port }},ssh
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }} ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}

2
ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
View file

@ -7,4 +7,4 @@ filter = haproxy-basic
backend = systemd backend = systemd
journalmatch = _COMM=haproxy journalmatch = _COMM=haproxy
port = http,https port = http,https
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }} ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}