Exclude nebula from fail2ban

2021-02-14 11:39:01 +00:00 · 2021-02-14 11:39:01 +00:00 · f7a0877e72
commit f7a0877e72
parent d8f2a83dfe
2 changed files with 2 additions and 2 deletions
--- a/ansible/roles/base/files/ssh-jail.conf
+++ b/ansible/roles/base/files/ssh-jail.conf
@ -4,4 +4,4 @@ bantime  = 600
 findtime = 30
 maxretry = 5
 port     = {{ ssh_port }},ssh
-ignoreip = {{ wireguard.cidr }}
+ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}
--- a/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
+++ b/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
@ -7,4 +7,4 @@ filter   = haproxy-basic
 backend  = systemd
 journalmatch = _COMM=haproxy
 port     = http,https
-ignoreip = {{ wireguard.cidr }}
+ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}