roles/common: use pyinotify backend for nginx fail2ban jail

This seems to be automatically selected, but on some other servers
I notice it is not. I will set it here explicitly so fail2ban does
not fall back to the inefficient "polling" or incorrect "systemd"
backends.
This commit is contained in:
Alan Orth 2022-01-04 15:10:02 +02:00
parent 68f0b85eb3
commit 0ffb1b1a36
Signed by: alanorth
GPG Key ID: 0FB860CC9C45B1B9

View File

@ -9,6 +9,7 @@ banaction=nftables[type=allports]
# Integrate with firewalld and ipsets
banaction = firewallcmd-ipset
{% endif %}
backend = pyinotify
logpath = /var/log/nginx/*-access.log
# Try to find a non-existent wp-login.php once and get banned. Tough luck.
maxretry = 1