blumeops/fly/fail2ban/jail.d/forge.conf
Erich Blume 771507e489 Disable all default fail2ban jails, not just sshd
Use [DEFAULT] enabled = false to disable all inherited jails globally.
The previous fix only disabled sshd, but sshd-ddos (and potentially
others) also fail looking for missing log files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-03 08:31:39 -08:00

12 lines
259 B
Text

# Disable all default jails — this container has no SSH, mail, etc.
[DEFAULT]
enabled = false
[forge-login]
enabled = true
filter = forge-login
logpath = /var/log/nginx/access.json.log
maxretry = 5
findtime = 600
bantime = 3600
banaction = nginx-deny