ssh, apache: Make fail2ban use systemd journald backend by default

- This allows disabling syslog daemons.

- Fall back to using file based monitoring for Apache.

Tests performed:

- Before and after the patch, connecting via SSH and typing in incorrect
password leads to a entry in fail2ban.log. 10 incorrect attempts result in a 10
minute ban.

- Before and after the patch, typing in incorrect password for radicale leads to
a entry in fail2ban.log. 10 incorrect attempts result in a 10 minute ban.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Veiko Aasa <veiko17@disroot.org>
This commit is contained in:
Sunil Mohan Adapa 2021-02-14 16:15:20 -08:00
parent 631e10c09e
commit fd7bda7ce9
No known key found for this signature in database
GPG Key ID: 43EA1CFF0AA7C5F2
2 changed files with 2 additions and 0 deletions

View File

@ -1,3 +1,4 @@
[DEFAULT]
# 10 tries in the last 10 minutes before banning for 10 minutes
maxretry = 10
backend = systemd

View File

@ -1,2 +1,3 @@
[apache-auth]
enabled = true
backend = auto