mirror of
https://github.com/RWejlgaard/pez-infra.git
synced 2026-05-06 04:14:43 +00:00
Rasmus "Pez" Wejlgaard
a7a71e4f87
Add firewall_alpine role for Alpine hosts with iptables persistence and fail2ban SSH jails. Wire it into nuremberg-a's deploy stage. Mail ports are already exposed via Docker port mappings in the poste-io docker-compose — this captures the surrounding iptables and fail2ban config that was previously undocumented. Closes PESO-96
16 lines
356 B
Django/Jinja
16 lines
356 B
Django/Jinja
# {{ ansible_managed }}
|
|
# fail2ban SSH jails for Alpine Linux
|
|
|
|
[sshd]
|
|
enabled = true
|
|
filter = alpine-sshd
|
|
port = ssh
|
|
logpath = /var/log/messages
|
|
maxretry = {{ firewall_alpine_fail2ban_maxretry }}
|
|
|
|
[sshd-ddos]
|
|
enabled = true
|
|
filter = alpine-sshd-ddos
|
|
port = ssh
|
|
logpath = /var/log/messages
|
|
maxretry = {{ firewall_alpine_fail2ban_maxretry }}
|