Claude
ecbe1fc03d
Self-hosted SSO portal with file-based users, SQLite storage, filesystem notifier, and an iptables-banning fail2ban sidecar. Designed to drop into a DotheEvo-style ~/docker layout next to a dockerized Caddy on the main server, joining the same external caddy_net so Caddy reaches Authelia by container name. fail2ban runs in host network mode with NET_ADMIN/NET_RAW caps so its bans hit DOCKER-USER and actually drop packets at the edge. Includes a Caddy snippet (caddy/snippet.example.caddyfile) to merge into the user's real Caddyfile -- this repo doesn't manage Caddy itself. https://claude.ai/code/session_013XZ1vmgk78k2PEQ5DmJhF3
15 lines
381 B
Plaintext
15 lines
381 B
Plaintext
[caddy-4xx]
|
|
enabled = true
|
|
filter = caddy-4xx
|
|
# Adjust if your Caddy writes elsewhere -- this must match the host path
|
|
# mounted into the fail2ban container in docker-compose.yml.
|
|
logpath = /var/log/caddy/access.log
|
|
maxretry = 30
|
|
findtime = 2m
|
|
bantime = 30m
|
|
|
|
chain = DOCKER-USER
|
|
banaction = iptables-allports
|
|
|
|
action = iptables-allports[name=caddy-4xx, chain=DOCKER-USER]
|