2 Commits

Author	SHA1	Message	Date
Alan Orth	0ffb1b1a36	roles/common: use pyinotify backend for nginx fail2ban jail ... This seems to be automatically selected, but on some other servers I notice it is not. I will set it here explicitly so fail2ban does not fall back to the inefficient "polling" or incorrect "systemd" backends.	2022-01-04 15:10:02 +02:00
Alan Orth	98cc3a8c2e	Add nginx filter for fail2ban ... Some hosts can use fail2ban's nginx-botsearch filter to ban anyone making requests to non-existent files like wp-login.php. There is no reason to request such files naively and anyone found doing so can be banned immediately. In theory I should report them to AbuseIPDB.com, but that will take a little more wiring up.	2021-08-01 09:56:43 +03:00