aboutsummaryrefslogtreecommitdiff
path: root/files
diff options
context:
space:
mode:
authorheqnx <root@heqnx.com>2025-06-23 10:24:15 +0300
committerheqnx <root@heqnx.com>2025-06-23 10:24:15 +0300
commit5832dc592761147a607a3ba35af8715c9adb0527 (patch)
treefbdcd9459b5f33d6f345ddf80d6f74c19bc8426d /files
parent049669e1cbb4a900fd4ac5c5ce506218c51da507 (diff)
downloadansible-pve-host-5832dc592761147a607a3ba35af8715c9adb0527.tar.gz
ansible-pve-host-5832dc592761147a607a3ba35af8715c9adb0527.zip
added sshd fail2ban
Diffstat (limited to 'files')
-rw-r--r--files/fail2ban/jail.d/sshd.local9
1 files changed, 9 insertions, 0 deletions
diff --git a/files/fail2ban/jail.d/sshd.local b/files/fail2ban/jail.d/sshd.local
new file mode 100644
index 0000000..534b62e
--- /dev/null
+++ b/files/fail2ban/jail.d/sshd.local
@@ -0,0 +1,9 @@
+[sshd]
+enabled = true
+mode = aggressive
+port = ssh
+backend = systemd
+action = iptables-allports[name=sshd, protocol=all]
+bantime = 24h
+maxretry = 3
+findtime = 600