Add systemd unit, Dockerfile, docker-compose, and fail2ban configs for production deployment
This commit is contained in:
3
deploy/fail2ban/filter.d/reverse-proxy.conf
Normal file
3
deploy/fail2ban/filter.d/reverse-proxy.conf
Normal file
@@ -0,0 +1,3 @@
|
||||
[Definition]
|
||||
failregex = ^RATE_LIMIT client_ip=<HOST> host=\S+ path=\S+ status=\d+$
|
||||
ignoreregex =
|
||||
7
deploy/fail2ban/jail.d/reverse-proxy.conf
Normal file
7
deploy/fail2ban/jail.d/reverse-proxy.conf
Normal file
@@ -0,0 +1,7 @@
|
||||
[reverse-proxy]
|
||||
enabled = true
|
||||
filter = reverse-proxy
|
||||
logpath = /var/log/reverse-proxy/access.log
|
||||
maxretry = 10
|
||||
findtime = 60
|
||||
bantime = 3600
|
||||
Reference in New Issue
Block a user