Commit 220cb8c8 authored by Phillip Smith (fukawi2)'s avatar Phillip Smith (fukawi2)
Browse files

make archwiki role depend on fail2ban role so we can reuse handlers

parent e6ad1aa9
dependencies:
- role: fail2ban
......@@ -101,11 +101,15 @@
- name: install fail2ban rate-limit filter
template: src=fail2ban.filter.j2 dest=/etc/fail2ban/filter.d/nginx-dos.local owner=root group=root mode=0644
notify:
- restart fail2ban
tags:
- fail2ban
- name: install fail2ban rate-limit jail
template: src=fail2ban.jail.j2 dest=/etc/fail2ban/jail.d/nginx-dos.local owner=root group=root mode=0644
notify:
- restart fail2ban
tags:
- fail2ban
......
......@@ -3,7 +3,7 @@
#
[wiki-nginx-dos]
enabled = true
enabled = false
filter = nginx-dos
action = iptables-multiport[name=ReqLimit, port="http,https", protocol=tcp]
logpath = /var/log/nginx/wiki.archlinux.org/access.log
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment