added systemd service and moved fail2ban code to separate files

2026-11-07 00:17:13 +01:00
parent faa1eca7c3
commit 2054f805c8
4 changed files with 35 additions and 20 deletions
@@ -0,0 +1,11 @@
+[caddy-auth]
+enabled   = true
+filter    = caddy-auth # /etc/fail2ban/filter.d/caddy-auth.conf
+logpath   = /var/log/caddy/files-auth.log
+backend   = auto    # without it on debian fail2ban will use systemd logging and to read caddy log
+maxretry  = 10      # N wrong passwords
+findtime  = 10m     # sent during 10 minutes
+bantime   = 1h      # ban for 1 hour
+banaction = iptables-allports   # ban the ip for all ports
+protocol  = all                 # and all protocols
+ignoreip  = 127.0.0.1/8 ::1     # ignore localhost