ansible-personal/group_vars/web

---
# file: group_vars/web

# run nginx by default
webserver: nginx

# all hosts run fail2ban with the sshd filter, but some can use other filters
extra_fail2ban_filters:
  - nginx

# vim: set ts=2 sw=2:
Add nginx filter for fail2ban Some hosts can use fail2ban's nginx-botsearch filter to ban anyone making requests to non-existent files like wp-login.php. There is no reason to request such files naively and anyone found doing so can be banned immediately. In theory I should report them to AbuseIPDB.com, but that will take a little more wiring up. 2021-08-01 08:56:43 +02:00			`---`
			`# file: group_vars/web`

group_vars/web: set default webserver to nginx While I'm still getting experience with caddy and adapting it to my workloads. 2022-11-02 20:12:36 +01:00			`# run nginx by default`
			`webserver: nginx`

Add nginx filter for fail2ban Some hosts can use fail2ban's nginx-botsearch filter to ban anyone making requests to non-existent files like wp-login.php. There is no reason to request such files naively and anyone found doing so can be banned immediately. In theory I should report them to AbuseIPDB.com, but that will take a little more wiring up. 2021-08-01 08:56:43 +02:00			`# all hosts run fail2ban with the sshd filter, but some can use other filters`
			`extra_fail2ban_filters:`
			`- nginx`

			`# vim: set ts=2 sw=2:`