Ansible config for hetzner mailserver

2026-09-18 10:32:55 +02:00 · 2026-03-14 22:24:53 +01:00
parent bc2f75294d
commit 2a3bfb5d1a
30 changed files with 775 additions and 0 deletions
@@ -0,0 +1,20 @@
+[DEFAULT]
+bantime = {{ fail2ban_bantime }}
+findtime = {{ fail2ban_findtime }}
+maxretry = {{ fail2ban_maxretry }}
+banaction = ufw
+
+{% for jail in fail2ban_jails %}
+[{{ jail.name }}]
+enabled = {{ jail.enabled | lower }}
+port = {{ jail.port }}
+maxretry = {{ jail.maxretry | default(fail2ban_maxretry) }}
+bantime = {{ jail.bantime | default(fail2ban_bantime) }}
+{% if jail.logpath is defined %}
+logpath = {{ jail.logpath }}
+{% endif %}
+{% if jail.filter is defined %}
+filter = {{ jail.filter }}
+{% endif %}
+
+{% endfor %}
@@ -0,0 +1,4 @@
+[Definition]
+failregex = ^\s*\S+ authentication\s+error\s+.*?remote\.ip=<HOST>
+            ^\s*.*?Authentication failed.*?ip=<HOST>
+ignoreregex =