Mirrors/RealOrangeOne-infrastructure
1
0
Fork 1
mirror of https://github.com/RealOrangeOne/infrastructure.git synced 2026-08-02 07:42:18 +00:00
Code Issues Projects Releases Wiki Activity

Ignore PVE interface from f2b jails

Browse source
This commit is contained in:
Jake Howard 2021-03-24 22:35:28 +00:00
parent f436e4660b
commit 5084bfecdf
No known key found for this signature in database
GPG key ID: 57AFB45680EDD477
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
ansible/roles/base/files/ssh-jail.conf
View file

@ -4,4 +4,4 @@ bantime = 600
findtime = 30
maxretry = 5
port = {{ ssh_port }},ssh
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}

2
ansible/roles/gateway/files/haproxy-fail2ban-jail.conf
View file

@ -7,4 +7,4 @@ filter = haproxy-basic
backend = systemd
journalmatch = _COMM=haproxy
port = http,https
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}