oss/Radicale
oss/Radicale
1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-08-01 18:18:31 +00:00
Code Wiki Activity

Updated Fail2Ban Setup (markdown)

Peter Bieringer 2024-03-16 09:31:20 +01:00
parent 97a6086d60
commit 3053ff9e66
1 changed files with 78 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

78
Fail2Ban-Setup.md

@ -1,3 +1,81 @@
# Radicale >= 3.0.0
(i) Radicale >= 3.0.0 logs to stdout which is usually catched by 'systemd/journald'
## Radicale without reverse proxy
### filter configuration
Example: /etc/fail2ban/filter.d/radicale.conf
```
[INCLUDES]
before = common.conf
[Definition]
failregex = ^.*Failed\slogin\sattempt\sfrom\s<HOST>:\s.*
[Init]
```
### jail configuration
Example: /etc/fail2ban/jail.d/90-radicale.conf
Adjust `port` according to configuration
```
[radicale]
enabled = true
port = 5232
filter = radicale
banaction = %(banaction_allports)s[name=radicale]
backend = systemd
journalmatch = _SYSTEMD_UNIT=radicale.service
maxretry = 2
bantime = -1
ignoreip = 127.0.0.1
findtime = 14400
```
## Radicale behind reverse proxy
### filter configuration
Example: /etc/fail2ban/filter.d/radicale.conf
```
[INCLUDES]
before = common.conf
[Definition]
failregex = ^.*Failed\slogin\sattempt\sfrom\s.*\(forwarded for \'<HOST>\'.*\):\s.*
[Init]
```
### jail configuration
Example: /etc/fail2ban/jail.d/90-radicale.conf
Adjust `port` according to your reverse proxy configuration
```
[radicale]
enabled = true
port = 80, 443
filter = radicale
banaction = %(banaction_allports)s[name=radicale]
backend = systemd
journalmatch = _SYSTEMD_UNIT=radicale.service
maxretry = 2
bantime = -1
ignoreip = 127.0.0.1
findtime = 14400
```
# Legacy example
To use Fail2Ban with radicale change Logging to `INFO`
Configs for fail2ban