From 53a0a5473f45d37027af9663638adbf56667e4ca Mon Sep 17 00:00:00 2001
From: Andrew Opalach <andrew@akon.city>
Date: Tue, 12 Nov 2024 22:26:02 -0500
Subject: Hopefully no leaks

---
 hosts/denpa/fail2ban/fail2ban.d/denpa.local |  2 ++
 hosts/denpa/fail2ban/jail.d/denpa.local     | 38 +++++++++++++++++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100644 hosts/denpa/fail2ban/fail2ban.d/denpa.local
 create mode 100644 hosts/denpa/fail2ban/jail.d/denpa.local

(limited to 'hosts/denpa/fail2ban')

diff --git a/hosts/denpa/fail2ban/fail2ban.d/denpa.local b/hosts/denpa/fail2ban/fail2ban.d/denpa.local
new file mode 100644
index 0000000..b3d98c4
--- /dev/null
+++ b/hosts/denpa/fail2ban/fail2ban.d/denpa.local
@@ -0,0 +1,2 @@
+[DEFAULT]
+allowipv6 = true
diff --git a/hosts/denpa/fail2ban/jail.d/denpa.local b/hosts/denpa/fail2ban/jail.d/denpa.local
new file mode 100644
index 0000000..70973fe
--- /dev/null
+++ b/hosts/denpa/fail2ban/jail.d/denpa.local
@@ -0,0 +1,38 @@
+[DEFAULT]
+maxretry = 4
+findtime = 60m
+bantime = 24h
+backend = systemd
+logtarget = SYSTEMD-JOURNAL
+banaction = nftables-multiport
+banaction_allports = nftables-allports
+#mta = sendmail
+#destemail = mark@akon.city
+#action = %(action_)s
+#  %(mta)s-whois-matches[sender="%(sender)s", dest="%(destemail)s", chain="%(chain)s"] 
+
+[postfix]
+enabled = true
+mode = aggressive
+journalmatch=_SYSTEMD_UNIT=postfix@-.service
+
+[postfix-sasl]
+enabled = true
+journalmatch=_SYSTEMD_UNIT=postfix@-.service
+
+[sieve]
+enabled = true
+journalmatch=_SYSTEMD_UNIT=dovecot.service
+
+[dovecot]
+enabled = true
+journalmatch=_SYSTEMD_UNIT=dovecot.service
+
+[nginx-limit-req]
+enabled = true
+journalmatch=_SYSTEMD_UNIT=nginx.service
+
+[sshd]
+enabled = true
+mode = aggressive
+journalmatch=_SYSTEMD_UNIT=ssh.service
-- 
cgit v1.2.3-101-g0448