ansible-role-reverse_proxy/templates/jail.local
2022-03-02 00:41:53 +01:00

49 lines
737 B
Text

# {{ ansible_managed }}
[DEFAULT]
ignoreip = 127.0.0.1/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
destemail = olivier+fail2ban@navas.rocks
banaction = nftables-multiport
banaction_allports = nftables-allports
action = %(action_mwl)s
apache_error_log = /var/log/apache2/*error.log
apache_access_log = /var/log/apache2/*access.log
[sshd]
enabled = true
[apache-auth]
enabled = true
logpath = %(apache_error_log)s
[apache-badbots]
enabled = true
[apache-noscript]
enabled = true
[apache-overflows]
enabled = true
[apache-nohome]
enabled = true
[apache-botsearch]
enabled = true
[apache-fakegooglebot]
enabled = true
[apache-modsecurity]
enabled = true
[apache-shellshock]
enabled = true
[recidive]
enabled = true