updated caddy and fail2ban instructions

This commit is contained in:
Altair-sh
2026-11-07 01:03:13 +01:00
parent 2054f805c8
commit 05379e25cf
3 changed files with 39 additions and 26 deletions
+3 -2
View File
@@ -1,3 +1,4 @@
[Definition]
failregex = <ADDR> 401 REDACTED$
ignoreregex =
datepattern = {^LN-BEG}%%Y-%%m-%%dT%%H:%%M:%%S\.%%f%%z
failregex = ^\s*<HOST>\s+401\s+REDACTED\s*$
ignoreregex =
+16 -8
View File
@@ -1,11 +1,19 @@
[caddy-auth]
enabled = true
filter = caddy-auth # /etc/fail2ban/filter.d/caddy-auth.conf
# /etc/fail2ban/filter.d/caddy-auth.conf
filter = caddy-auth
logpath = /var/log/caddy/files-auth.log
backend = auto # without it on debian fail2ban will use systemd logging and to read caddy log
maxretry = 10 # N wrong passwords
findtime = 10m # sent during 10 minutes
bantime = 1h # ban for 1 hour
banaction = iptables-allports # ban the ip for all ports
protocol = all # and all protocols
ignoreip = 127.0.0.1/8 ::1 # ignore localhost
# without it on debian fail2ban will use systemd logging and to read caddy log
backend = auto
# N wrong passwords
maxretry = 10
# sent during 10 minutes
findtime = 10m
# ban for 1 hour
bantime = 1h
# ban the ip for all ports
banaction = iptables-allports
# and all protocols
protocol = all
# ignore localhost
ignoreip = 127.0.0.1/8 ::1