initial import

etc/fail2ban/jail.local

@@ -0,0 +1,26 @@
+[DEFAULT]
+ignoreip  = 127.0.0.1/8
+bantime   = 3600
+maxretry  = 3
+backend   = systemd
+destemail = root@localhost
+
+# filter.d/nginx-4xx.conf
+#  [Definition]
+#  failregex = ^<HOST>.*"(GET|POST).*" (404|444|403|400) .*$
+#  ignoreregex =
+
+[nginx-4xx]
+enabled   = false
+port      = http,https
+logpath   = /var/log/nginx/access.log
+maxretry  = 10
+findtime  = 3600
+bantime   = 3600
+
+[nginx-limit-req]
+enabled   = false
+port      = http,https
+logpath   = /var/log/nginx/error.log
+findtime  = 3600
+bantime   = 3600