From: Tom Hughes <tom@compton.nu>
Date: Tue, 12 Mar 2024 09:00:20 +0000 (+0000)
Subject: Adjust trigger for evasive jail
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/c375b083a4ae5170c4c3c04e0737875b2e69f62c

Adjust trigger for evasive jail
---

diff --git a/cookbooks/apache/recipes/default.rb b/cookbooks/apache/recipes/default.rb
index 80e9e473f..0a8962b53 100644
--- a/cookbooks/apache/recipes/default.rb
+++ b/cookbooks/apache/recipes/default.rb
@@ -119,10 +119,10 @@ end
 fail2ban_jail "apache-evasive" do
   filter "apache-evasive"
   backend "systemd"
-  journalmatch "SYSLOG_IDENTIFIER=mod_evasive"
+  journalmatch "_SYSTEMD_UNIT=apache2.service SYSLOG_IDENTIFIER=mod_evasive"
   ports [80, 443]
-  findtime "1m"
-  maxretry 50
+  findtime "10m"
+  maxretry 3
 end
 
 munin_plugin "apache_accesses"