From 53a0a5473f45d37027af9663638adbf56667e4ca Mon Sep 17 00:00:00 2001
From: Andrew Opalach <andrew@akon.city>
Date: Tue, 12 Nov 2024 22:26:02 -0500
Subject: Hopefully no leaks

---
 hosts/rod/fail2ban/fail2ban.d/rod.local |  2 ++
 hosts/rod/fail2ban/jail.d/rod.local     | 15 +++++++++++++++
 2 files changed, 17 insertions(+)
 create mode 100644 hosts/rod/fail2ban/fail2ban.d/rod.local
 create mode 100644 hosts/rod/fail2ban/jail.d/rod.local

(limited to 'hosts/rod/fail2ban')

diff --git a/hosts/rod/fail2ban/fail2ban.d/rod.local b/hosts/rod/fail2ban/fail2ban.d/rod.local
new file mode 100644
index 0000000..b3d98c4
--- /dev/null
+++ b/hosts/rod/fail2ban/fail2ban.d/rod.local
@@ -0,0 +1,2 @@
+[DEFAULT]
+allowipv6 = true
diff --git a/hosts/rod/fail2ban/jail.d/rod.local b/hosts/rod/fail2ban/jail.d/rod.local
new file mode 100644
index 0000000..c8c0916
--- /dev/null
+++ b/hosts/rod/fail2ban/jail.d/rod.local
@@ -0,0 +1,15 @@
+[DEFAULT]
+chain = input
+maxretry = 3
+findtime = 60m
+bantime = 24h
+backend = systemd
+logtarget = SYSTEMD-JOURNAL
+banaction = nftables-multiport
+banaction_allports = nftables-allports
+
+[sshd]
+enabled = true
+port = 1738
+mode = aggressive
+journalmatch=_SYSTEMD_UNIT=ssh.service
-- 
cgit v1.2.3-101-g0448