diff --git a/roles/fail2ban/files/filter.d/caddy-crawler.conf b/roles/fail2ban/files/filter.d/caddy-crawler.conf new file mode 100644 index 0000000..f528578 --- /dev/null +++ b/roles/fail2ban/files/filter.d/caddy-crawler.conf @@ -0,0 +1,2 @@ +[Definition] +failregex = .*"remote_ip":"".* diff --git a/roles/fail2ban/files/jail.d/caddy.conf b/roles/fail2ban/files/jail.d/caddy.conf index 412d730..484b3e7 100644 --- a/roles/fail2ban/files/jail.d/caddy.conf +++ b/roles/fail2ban/files/jail.d/caddy.conf @@ -14,3 +14,11 @@ filter = caddy-auth maxretry = 40 findtime = 10m bantime = 1h + +[caddy-crawler] +enabled = true +journalmatch = CONTAINER_NAME=caddy +filter = caddy-crawler +maxretry = 200 +findtime = 1m +bantime = 6h