25 lines
476 B
Plaintext
25 lines
476 B
Plaintext
[DEFAULT]
|
|
bantime = 30m
|
|
findtime = 10m
|
|
maxretry = 5
|
|
backend = systemd
|
|
|
|
# --- SSH brute force ---
|
|
[sshd]
|
|
enabled = true
|
|
maxretry = 3
|
|
bantime = 1h
|
|
|
|
# --- nginx basic-auth failures (from error.log) ---
|
|
[nginx-http-auth]
|
|
enabled = true
|
|
logpath = /var/log/nginx/error.log
|
|
maxretry = 5
|
|
|
|
# --- enable later if bot noise grows (stock filter, matches probe URIs) ---
|
|
#[nginx-botsearch]
|
|
#enabled = true
|
|
#logpath = /var/log/nginx/access.log
|
|
#port = http,https
|
|
#maxretry = 20
|