]> git.openstreetmap.org Git - chef.git/blob - cookbooks/fail2ban/templates/default/jail.default.erb
Add support for using an nftables based firewall
[chef.git] / cookbooks / fail2ban / templates / default / jail.default.erb
1 # DO NOT EDIT - This file is being maintained by Chef
2
3 [DEFAULT]
4 destemail = admins@openstreetmap.org
5 <%- if node[:networking][:firewall][:engine] == "shorewall" %>
6 banaction = shorewall
7 <%- elsif node[:networking][:firewall][:engine] == "nftables" %>
8 banaction = nftables[type=multiport]
9 banaction_allports = nftables[type=allports]
10 <%- end %>
11 bantime = 14400