added fail2ban jail for nextcloud
This commit is contained in:
parent
8639806c33
commit
e5be7ccdee
10
fail2ban/files/jail.d/nextcloud.local
Normal file
10
fail2ban/files/jail.d/nextcloud.local
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
[nextcloud]
|
||||||
|
backend = auto
|
||||||
|
enabled = true
|
||||||
|
port = 80,443
|
||||||
|
protocol = tcp
|
||||||
|
filter = nextcloud
|
||||||
|
maxretry = 3
|
||||||
|
bantime = 1w
|
||||||
|
findtime = 1d
|
||||||
|
logpath = /srv/podman/containers/storage/volumes/nextcloud-data/_data/data/nextcloud.log
|
@ -89,7 +89,7 @@ before = paths-opensuse.conf
|
|||||||
# "ignoreip" can be a list of IP addresses, CIDR masks or DNS hosts. Fail2ban
|
# "ignoreip" can be a list of IP addresses, CIDR masks or DNS hosts. Fail2ban
|
||||||
# will not ban a host which matches an address in this list. Several addresses
|
# will not ban a host which matches an address in this list. Several addresses
|
||||||
# can be defined using space (and/or comma) separator.
|
# can be defined using space (and/or comma) separator.
|
||||||
#ignoreip = 127.0.0.1/8 ::1
|
ignoreip = 127.0.0.1/8 ::1 10.2.0.101 10.0.10.156 10.0.10.174
|
||||||
|
|
||||||
# External command that will take an tagged arguments to ignore, e.g. <ip>,
|
# External command that will take an tagged arguments to ignore, e.g. <ip>,
|
||||||
# and return true if the IP is to be ignored. False otherwise.
|
# and return true if the IP is to be ignored. False otherwise.
|
||||||
|
Reference in New Issue
Block a user