Richard/Deploymentcenter
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security Hardening: Proaktive Kontosperren, Fail2Ban-Integration, SecurityLogger, Alerting und API-Schutz

Browse Source
This commit is contained in:
Deploymentcenter Bot
2026-09-08 11:45:04 +02:00
parent 087f4392a9
commit edea46e342
17 changed files with 927 additions and 169 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/fail2ban/filter.d/deploymentcenter.conf
+11
View File
@@ -0,0 +1,11 @@
# Fail2Ban Filter-Konfiguration fuer Deploymentcenter
# Pfad auf dem Server: /etc/fail2ban/filter.d/deploymentcenter.conf
[Definition]
# Erkennt fehlgeschlagene WebUI-Logins, Kontosperren, ungueltige API-Tokens und Rate-Limit-Verstoesse
failregex = ^.*\[SECURITY\] \[(?:AUTH_FAIL|ACCOUNT_LOCKED|IP_LOCKED|API_AUTH_FAIL|API_BRUTE_FORCE|RATE_LIMITED)\] ip=<HOST>(?: |$).*$
ignoreregex =
# Zeitstempel-Muster fuer [YYYY-MM-DD HH:MM:SS]
datepattern = ^\[%%Y-%%m-%%d %%H:%%M:%%S\]