chore: first commit

2025-07-25 20:23:54 +02:00
parent 5c4016357f
commit c612cc7839
88 changed files with 3255 additions and 0 deletions
@@ -0,0 +1,11 @@
+[Service]
+PrivateDevices=yes
+PrivateTmp=yes
+ProtectHome=read-only
+ProtectSystem=strict
+ReadWritePaths=-/var/run/fail2ban
+ReadWritePaths=-/var/lib/fail2ban
+ReadWritePaths=-/var/log/fail2ban.log
+ReadWritePaths=-/var/spool/postfix/maildrop
+ReadWritePaths=-/run/xtables.lock
+CapabilityBoundingSet=CAP_AUDIT_READ CAP_DAC_READ_SEARCH CAP_NET_ADMIN CAP_NET_RAW
@@ -0,0 +1,7 @@
+[DEFAULT]
+bantime    = 1d
+banaction  = {{fail2ban_firewall}}
+allowipv6  = true
+ignoreip   = 127.0.0.1/8
+backend    = {{fail2ban_backend}}
+ignoreself = true
@@ -0,0 +1,6 @@
+[nginx-http-auth]
+enabled    = true
+port       = http, https
+maxretry   = 2
+findtime   = 1d
+bantime    = 2w
@@ -0,0 +1,6 @@
+[sshd]
+enabled    = true
+filter     = sshd
+maxretry   = 5
+findtime   = 1d
+bantime    = 2w