From b9be0883728e50621949f67072c8ed71b3902661 Mon Sep 17 00:00:00 2001
From: David Beniamine <david.beniamine@tetras-libre.fr>
Date: Wed, 8 Jan 2025 09:55:04 +0100
Subject: [PATCH] Set ignoreip for tetrix and servermon
---
install/Base.sh | 3 ---
utils/configure_base_tools.sh | 7 +++++++
2 files changed, 7 insertions(+), 3 deletions(-)
diff --git a/install/Base.sh b/install/Base.sh
index d7537cd..4c9c542 100644
--- a/install/Base.sh
+++ b/install/Base.sh
@@ -158,9 +158,6 @@ enabled = true
[recidive]
enabled = true
EOF
-# Ignore servermonitor IP
-sed -i "s/^#\(ignoreip.*\)/\1 $(dig +short servermon.tetras-libre.fr | tail -n 1)/" /etc/fail2ban/jail.conf
-fail2ban-client reload
if [ ! -e "/var/log/auth.log" ]; then
# No auth.log fail2ban must be using systemd
diff --git a/utils/configure_base_tools.sh b/utils/configure_base_tools.sh
index 732acb1..ba8ced0 100755
--- a/utils/configure_base_tools.sh
+++ b/utils/configure_base_tools.sh
@@ -34,3 +34,10 @@ highlight ColorColumn ctermbg=darkgrey
syntax on
filetype plugin indent on
EOF
+
+cat <<EOF > /etc/fail2ban/jail.local
+[DEFAULT]
+
+ignoreip = $(dig +short servermon.tetras-libre.fr | tail -n 1) $(dig +short tetrix.tetras-libre.fr | tail -n 1)
+EOF
+fail2ban-client reload
--
GitLab