04.08.25

roles/fail2ban/templates/jail.local.j2

@@ -0,0 +1,14 @@
+[sshd]
+enabled = {{ 'true' if fail2ban_sshd_enabled else 'false' }}
+port = ssh
+logpath = %(sshd_log)s
+maxretry = {{ fail2ban_sshd_maxretry }}
+bantime = {{ fail2ban_sshd_bantime }}
+
+[nginx-http-auth]
+enabled = {{ 'true' if fail2ban_nginx_enabled else 'false' }}
+port = http,https
+logpath = /var/log/nginx/error.log
+maxretry = {{ fail2ban_nginx_maxretry }}
+bantime = {{ fail2ban_nginx_bantime }}
+

roles/fail2ban/templates/nginx.conf.j2

@@ -0,0 +1,4 @@
+[Definition]
+failregex = no user/password was provided for basic authentication.*client: <HOST>
+ignoreregex =
+