Altair-sh
20 lines
480 B
Plaintext
20 lines
480 B
Plaintext
[caddy-auth]
|
|
enabled = true
|
|
# /etc/fail2ban/filter.d/caddy-auth.conf
|
|
filter = caddy-auth
|
|
logpath = /var/log/caddy/files-auth.log
|
|
# without it on debian fail2ban will use systemd logging and to read caddy log
|
|
backend = auto
|
|
# N wrong passwords
|
|
maxretry = 10
|
|
# sent during 10 minutes
|
|
findtime = 10m
|
|
# ban for 1 hour
|
|
bantime = 1h
|
|
# ban the ip for all ports
|
|
banaction = iptables-allports
|
|
# and all protocols
|
|
protocol = all
|
|
# ignore localhost
|
|
ignoreip = 127.0.0.1/8 ::1
|