ansible-personal

Commit Graph

Author	SHA1	Message	Date
Alan Orth	34be0013b7	Remove Debian 10 support	2022-09-11 09:21:08 +03:00
Alan Orth	0ffb1b1a36	roles/common: use pyinotify backend for nginx fail2ban jail This seems to be automatically selected, but on some other servers I notice it is not. I will set it here explicitly so fail2ban does not fall back to the inefficient "polling" or incorrect "systemd" backends.	2022-01-04 15:10:02 +02:00
Alan Orth	98cc3a8c2e	Add nginx filter for fail2ban Some hosts can use fail2ban's nginx-botsearch filter to ban anyone making requests to non-existent files like wp-login.php. There is no reason to request such files naively and anyone found doing so can be banned immediately. In theory I should report them to AbuseIPDB.com, but that will take a little more wiring up.	2021-08-01 09:56:43 +03:00

Author

SHA1

Message

Date

Alan Orth

34be0013b7

Remove Debian 10 support

2022-09-11 09:21:08 +03:00

Alan Orth

0ffb1b1a36

roles/common: use pyinotify backend for nginx fail2ban jail

This seems to be automatically selected, but on some other servers
I notice it is not. I will set it here explicitly so fail2ban does
not fall back to the inefficient "polling" or incorrect "systemd"
backends.

2022-01-04 15:10:02 +02:00

Alan Orth

98cc3a8c2e

Add nginx filter for fail2ban

Some hosts can use fail2ban's nginx-botsearch filter to ban anyone
making requests to non-existent files like wp-login.php. There is
no reason to request such files naively and anyone found doing so
can be banned immediately.

In theory I should report them to AbuseIPDB.com, but that will take
a little more wiring up.

2021-08-01 09:56:43 +03:00

3 Commits