nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-05-20 10:34:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

ssh, apache: Make fail2ban use systemd journald backend by default

Browse Source 
- This allows disabling syslog daemons.

- Fall back to using file based monitoring for Apache.

Tests performed:

- Before and after the patch, connecting via SSH and typing in incorrect
password leads to a entry in fail2ban.log. 10 incorrect attempts result in a 10
minute ban.

- Before and after the patch, typing in incorrect password for radicale leads to
a entry in fail2ban.log. 10 incorrect attempts result in a 10 minute ban.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Veiko Aasa <veiko17@disroot.org>
This commit is contained in:
Sunil Mohan Adapa 2021-02-14 16:15:20 -08:00
parent 631e10c09e
commit fd7bda7ce9
No known key found for this signature in database
GPG Key ID: 43EA1CFF0AA7C5F2
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
data/etc/fail2ban/jail.d/freedombox.conf
View File

@ -1,3 +1,4 @@
[DEFAULT] [DEFAULT]
# 10 tries in the last 10 minutes before banning for 10 minutes # 10 tries in the last 10 minutes before banning for 10 minutes
maxretry = 10 maxretry = 10
backend = systemd

1
plinth/modules/apache/data/etc/fail2ban/jail.d/apache-auth-freedombox.conf
View File

@ -1,2 +1,3 @@
[apache-auth] [apache-auth]
enabled = true enabled = true
backend = auto