infrastructure/ansible/roles/traefik/files/fail2ban/traefik-jail.conf
Jake Howard 4d218248fa
Remotely connect to fail2ban to do ports
Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.
2021-03-28 16:06:36 +01:00

11 lines
247 B
Plaintext

[traefik]
enabled = true
bantime = 6000
findtime = 300
maxretry = 5
filter = traefik
logpath = /tmp/traefik-logs/access.log
port = http,https
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
action = gateway