systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 17 Activity Actions

Exclude nebula from fail2ban

Browse source
This commit is contained in:
Jake Howard 2021-02-14 11:39:01 +00:00
parent d8f2a83dfe
commit f7a0877e72
Signed by: jake
GPG key ID: 57AFB45680EDD477
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ansible/roles/base/files/ssh-jail.conf
View file

@ -4,4 +4,4 @@ bantime = 600
findtime = 30 findtime = 30
maxretry = 5 maxretry = 5
port = {{ ssh_port }},ssh port = {{ ssh_port }},ssh
ignoreip = {{ wireguard.cidr }} ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}

2
ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
View file

@ -7,4 +7,4 @@ filter = haproxy-basic
backend = systemd backend = systemd
journalmatch = _COMM=haproxy journalmatch = _COMM=haproxy
port = http,https port = http,https
ignoreip = {{ wireguard.cidr }} ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}