[caddy-auth]
enabled   = true
# /etc/fail2ban/filter.d/caddy-auth.conf
filter    = caddy-auth
logpath   = /var/log/caddy/files-auth.log
# without it on debian fail2ban will use systemd logging and to read caddy log
backend   = auto
# N wrong passwords
maxretry  = 10
# sent during 10 minutes
findtime  = 10m
# ban for 1 hour
bantime   = 1h
# ban the ip for all ports
banaction = iptables-allports
# and all protocols
protocol  = all
# ignore localhost
ignoreip  = 127.0.0.1/8 ::1