accounting/bench
2
0
Fork 0
mirror of https://github.com/frappe/bench.git synced 2025-01-23 07:08:23 +00:00
Code Issues Releases Activity

fix(config): Fix fail2ban filter (#1308)

Browse Source 
* Add missing nginx-proxy filter

* Add all nginx log files to fail2ban filter, regardless of frappe site

* Adds per site nginx logs in /var/log
This commit is contained in:
Orsiris de Jong 2022-07-27 11:28:53 +02:00 committed by GitHub
parent 1e0054bc14
commit 94a25d3da7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
bench/config/templates/nginx.conf
View File

@ -113,6 +113,11 @@ server {
{% endfor -%} {% endfor -%}
# logs in var
access_log /var/log/nginx/{{ site_name }}_access.log main;
error_log /var/log/nginx/{{ site_name }}_error.log;
# optimizations # optimizations
sendfile on; sendfile on;
keepalive_timeout 15; keepalive_timeout 15;

2
bench/playbooks/roles/fail2ban/defaults/main.yml
View File

@ -1,5 +1,5 @@
--- ---
fail2ban_nginx_access_log: /var/log/nginx/access.log fail2ban_nginx_access_log: /var/log/nginx/*access.log
maxretry: 6 maxretry: 6
bantime: 600 bantime: 600
findtime: 600 findtime: 600

3
bench/playbooks/roles/fail2ban/tasks/configure_nginx_jail.yml
View File

@ -5,6 +5,9 @@
vars_files: vars_files:
- ../defaults/main.yml - ../defaults/main.yml
tasks: tasks:
- name: Setup filter
template: src="../templates/nginx-proxy-filter.conf.j2" dest="/etc/fail2ban/filter.d/nginx-proxy.conf"
- name: Setup jail - name: Setup jail
template: src="../templates/nginx-proxy-jail.conf.j2" dest="/etc/fail2ban/jail.d/nginx-proxy.conf" template: src="../templates/nginx-proxy-jail.conf.j2" dest="/etc/fail2ban/jail.d/nginx-proxy.conf"
- name: restart service - name: restart service