Security Hardening: Proaktive Kontosperren, Fail2Ban-Integration, SecurityLogger, Alerting und API-Schutz

config/fail2ban/filter.d/deploymentcenter.conf

@@ -0,0 +1,11 @@
+# Fail2Ban Filter-Konfiguration fuer Deploymentcenter
+# Pfad auf dem Server: /etc/fail2ban/filter.d/deploymentcenter.conf
+
+[Definition]
+# Erkennt fehlgeschlagene WebUI-Logins, Kontosperren, ungueltige API-Tokens und Rate-Limit-Verstoesse
+failregex = ^.*\[SECURITY\] \[(?:AUTH_FAIL|ACCOUNT_LOCKED|IP_LOCKED|API_AUTH_FAIL|API_BRUTE_FORCE|RATE_LIMITED)\] ip=<HOST>(?: |$).*$
+
+ignoreregex =
+
+# Zeitstempel-Muster fuer [YYYY-MM-DD HH:MM:SS]
+datepattern = ^\[%%Y-%%m-%%d %%H:%%M:%%S\]

config/fail2ban/jail.d/deploymentcenter.local

@@ -0,0 +1,12 @@
+# Fail2Ban Jail-Konfiguration fuer Deploymentcenter
+# Pfad auf dem Server: /etc/fail2ban/jail.d/deploymentcenter.local
+
+[deploymentcenter]
+enabled  = true
+port     = http,https
+filter   = deploymentcenter
+# Pfad zur persistenten Sicherheits-Logdatei des Deploymentcenters anpassen:
+logpath  = /var/www/deploymentcenter/var/log/security.log
+maxretry = 5
+findtime = 600
+bantime  = 3600