Clément Désiles 6355a9aae5 fix(fail2ban): ban via ufw deny (DROP) instead of reject ...

REJECT needs the nft_reject kernel extension, which is unavailable on
this Arch kernel (iptables-nft reports 'Extension REJECT revision 0
not supported'), so every ban silently failed. DROP works everywhere
and is quieter toward attackers.

2026-09-05 16:45:12 +02:00

..

fail2ban.local.j2

fix(fail2ban): start under ProtectSystem=strict hardening

2026-09-05 16:21:49 +02:00

hardened.fail2ban.conf.j2

fix(fail2ban): use ProtectSystem=full so ufw can create its lock file

2026-09-05 16:28:55 +02:00

jail.local.j2

fix(fail2ban): ban via ufw deny (DROP) instead of reject

2026-09-05 16:45:12 +02:00

nginx-jail.local.j2

chore: first commit

2025-07-25 20:23:54 +02:00

sshd-jail.local.j2

chore: first commit

2025-07-25 20:23:54 +02:00