From 933945045c907a47206faae53d0a9086b39f0e1e Mon Sep 17 00:00:00 2001 From: Infinidoge Date: Sat, 17 Aug 2024 03:55:35 -0400 Subject: [PATCH] Infini-DL360: replace nginx url fail2ban regex --- hosts/Infini-DL360/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hosts/Infini-DL360/default.nix b/hosts/Infini-DL360/default.nix index 6e6ee0a..812f41d 100644 --- a/hosts/Infini-DL360/default.nix +++ b/hosts/Infini-DL360/default.nix @@ -64,7 +64,7 @@ environment.etc."fail2ban/filter.d/nginx-url-probe.local".text = lib.mkDefault (lib.mkAfter '' [Definition] - failregex = ^.*(GET /(wp-|admin|boaform|phpmyadmin|\.env|\.git|notifications)|\.(dll|so|cfm|asp)|(\?|&)(=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000|=PHPE9568F36-D428-11d2-A769-00AA001ACF42|=PHPE9568F35-D428-11d2-A769-00AA001ACF42|=PHPE9568F34-D428-11d2-A769-00AA001ACF42)|\\x[0-9a-zA-Z]{2}) + failregex = ^.*GET.*(\.php|admin|wp\-).* HTTP/\d.\d\" 404.*$ ''); services.fail2ban.jails.nginx-url-probe.settings = {