added systemd service and moved fail2ban code to separate files

deploy/caddy-auth.conf

@@ -0,0 +1,3 @@
+[Definition]
+failregex = <ADDR> 401 REDACTED$
+ignoreregex =

deploy/caddy-auth.local

@@ -0,0 +1,11 @@
+[caddy-auth]
+enabled   = true
+filter    = caddy-auth # /etc/fail2ban/filter.d/caddy-auth.conf
+logpath   = /var/log/caddy/files-auth.log
+backend   = auto    # without it on debian fail2ban will use systemd logging and to read caddy log
+maxretry  = 10      # N wrong passwords
+findtime  = 10m     # sent during 10 minutes
+bantime   = 1h      # ban for 1 hour
+banaction = iptables-allports   # ban the ip for all ports
+protocol  = all                 # and all protocols
+ignoreip  = 127.0.0.1/8 ::1     # ignore localhost

deploy/serveg.service

@@ -0,0 +1,19 @@
+[Unit]
+Description=serveg file server
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=filebin
+Group=filebin
+WorkingDirectory=/home/filebin
+ExecStart=/home/filebin/serveg
+Restart=on-failure
+RestartSec=5
+
+KillSignal=SIGTERM
+TimeoutStopSec=10
+
+[Install]
+WantedBy=multi-user.target