From 771507e489ecf7ed04443d3997db460fbd5adf98 Mon Sep 17 00:00:00 2001 From: Erich Blume Date: Tue, 3 Mar 2026 08:31:39 -0800 Subject: [PATCH] Disable all default fail2ban jails, not just sshd Use [DEFAULT] enabled = false to disable all inherited jails globally. The previous fix only disabled sshd, but sshd-ddos (and potentially others) also fail looking for missing log files. Co-Authored-By: Claude Opus 4.6 --- fly/fail2ban/jail.d/forge.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fly/fail2ban/jail.d/forge.conf b/fly/fail2ban/jail.d/forge.conf index 50908b3..50be379 100644 --- a/fly/fail2ban/jail.d/forge.conf +++ b/fly/fail2ban/jail.d/forge.conf @@ -1,5 +1,5 @@ -# Disable the default sshd jail — no SSH server in this container -[sshd] +# Disable all default jails — this container has no SSH, mail, etc. +[DEFAULT] enabled = false [forge-login]