infrastructure/ansible/roles/traefik/files/fail2ban/traefik-jail.conf

11 lines
343 B
Plaintext

[traefik]
enabled = true
bantime = 6000
findtime = 300
maxretry = 5
filter = traefik
logpath = /tmp/traefik-logs/access.log
port = http,https
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }},{{ pve_hosts.internal_cidr_ipv6 }},{{ vps_hosts.values()|sort|join(",") }},{{ tailscale_cidr }}
action = gateway