Files
docker-compose-selfhost/fail2ban/filter.d/nginx-4xx.conf

11 lines
548 B
Plaintext

[Definition]
# ✅ Match any 4xx status (including 401, 499) for all paths
failregex = ^.*"x_forwarded_for":"<HOST>".*"status":4\d\d.*$
^.*"remote_addr":"<HOST>".*"status":4\d\d.*$
# ❌ Ignore:
# - ALL status codes under /pgadmin4 (including 401, 499, 404, etc.)
# - Static files and known safe URIs
ignoreregex = ^.*"request_uri":"\/pgadmin4(?:\/[^"]*)?".*$
^.*"request_uri":"\/(?:stub_status|health\/system|health\/worker|\.well-known\/acme-challenge\/[^"]*|[^"]*\.(?:css|js|png|jpg|jpeg|gif|svg|ico|webp|woff2?))".*$