Mirrors/vaultwarden
2
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden synced 2024-11-22 11:53:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

updated fail2ban setup to match changes in logformat for 1.5.0

Browse source
This commit is contained in:
jes 2018-12-16 22:30:25 +08:00
parent a335bcd682
commit d5dfda8905
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
README.md
View file

@ -441,7 +441,7 @@ If you are using docker-compose, add this to you yaml file:
``` ```
With the above settings in the docker-compose file. Any failed login attempts will look like this in your syslog file: With the above settings in the docker-compose file. Any failed login attempts will look like this in your syslog file:
``` ```
$DATE $TIME $SERVER $TAG[979]: ERROR: Username or password is incorrect. Try again. IP: XX.XX.XX.XX. Username: email@domain.com. MMM DD hh:mm:ss server-hostname $TAG[773]: [YYYY-MM-DD][hh:mm:ss][bitwarden_rs::api::identity][ERROR] Username or password is incorrect. Try again. IP: XXX.XXX.XXX.XXX. Username: email@domain.com.
``` ```
You can change the '$TAG' to anything you like. Just remember it because it will be in the Fail2Ban filter. You can change the '$TAG' to anything you like. Just remember it because it will be in the Fail2Ban filter.
@ -457,7 +457,8 @@ And add the following
before = common.conf before = common.conf
[Definition] [Definition]
failregex = ^%(__prefix_line)s.*$TAG.* ERROR: Username or password is incorrect. Try again. IP: <HOST>\. Username:.*$ _daemon = $TAG
failregex = ^%(__prefix_line)s.*Username or password is incorrect\. Try again\. IP: <HOST>\. Username:.*$
ignoreregex = ignoreregex =
``` ```
Dont forget to change the '$TAG' to what you set it as from above. Dont forget to change the '$TAG' to what you set it as from above.