[INCLUDES]
before = paths-debian.conf

[DEFAULT]
bantime  = 3600
# incremental enabled:
bantime.increment = true
# factor 12 means the ban time grows by 12 for each next ban, so 2h, 1d, 12d, ...
bantime.factor = 12
# ban time grows up to 30 days:
bantime.maxtime = 30d
findtime  = 600
maxretry = 5
ignoreip = 85.95.153.100
backend = systemd[journalflags=1]
enabled = false
mode = normal
filter = %(__name__)s[mode=%(mode)s]
destemail = root@localhost
sender = root@<fq-hostname>
mta = sendmail
protocol = tcp
chain = input
port = 0:65535
fail2ban_agent = Fail2Ban/%(fail2ban_version)s
banaction = nftables-multiport
banaction_allports = nftables[type=allports]
action = %(action_)s

[sshd]
enabled  = true
port     = 18123
backend = systemd[journalflags=1,namespace=sshlog]
protocol = tcp
maxretry = 3
findtime = 600
bantime  = 3600

[nginx-http-auth]
backend = systemd[journalflags=1,namespace=sshlog]
enabled = true
port    = http,https
findtime = 86400
maxretry = 2

[nginx-limit-req]
enabled = true
backend = systemd[journalflags=1,namespace=nginxlog]
port    = http,https
bantime = 86400
maxretry = 2

[nginx-botsearch]
enabled = true
backend = systemd[journalflags=1,namespace=nginxlog]
port = http,https
maxretry = 5

[nginx-noproxy]
enabled  = true
backend = systemd[journalflags=1,namespace=nginxlog]
port     = http,https
bantime = 15552000
maxretry = 1

[nginx-forbidden]
enabled = true
port = http,https
backend = systemd[journalflags=1,namespace=nginxlog]
maxretry = 5

[nginx-sslerror]
enabled = true
port    = http,https
backend = systemd[journalflags=1,namespace=nginxlog]
maxretry = 1

[php-url-fopen]
enabled = true
backend = systemd[journalflags=1,namespace=nginxlog]
port    = http,https
maxretry = 1