infrastructure/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
2021-03-28 16:28:07 +01:00

17 lines
497 B
Plaintext

[haproxy]
enabled = true
bantime = 600
findtime = 10
maxretry = 100
filter = haproxy-basic
backend = systemd
journalmatch = _COMM=haproxy
port = http,https,{{ haproxy.exposed_ports | join(",") }}
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
[traefik]
enabled = true
filter = haproxy-basic # Not actually used
port = http,https,{{ haproxy.exposed_ports | join(",") }}
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}