Join the community today
Become a Member

Beta Branch update Nginx vhost routines for better fail2ban integration in 130.00beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Apr 8, 2023.

  1. eva2000

    eva2000 Administrator Staff Member

    59,401
    12,517
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,153
    Local Time:
    8:43 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    update Nginx vhost routines for better fail2ban integration in 130.00beta01

    - Centmin Mod has long had an separate experimental fail2ban implementation tailored for Centmin Mod Nginx LEMP stacks at GitHub - centminmod/centminmod-fail2ban: fail2ban setup for centminmod.com LEMP stack with CSF Firewall which used fail2ban 0.11 with Python 2.7 for CentOS 7 only. Fail2ban 0.11 is old now with fail2ban 1.0.2 the latest version so updated Centmin Mod's experimental fail2ban implementation to fail2ban 1.0.2 with Python 3.6 support for CentOS 7 and upcoming AlmaLinux 8 and Rocky Linux 8 OSes in a separate branch at GitHub - centminmod/centminmod-fail2ban at 1.0
    - It's labeled as experimental as it's provided as is without official support by me and it isn't fully tested and relies on end user bug reporting and end user existing fail2ban knowledge and know-how to know what they're doing with fail2ban and customizing their fail2ban jails and parameters beyond the defaults configured. Centmin Mod's fail2ban implementation is just like regularly fail2ban just with custom jail config file rules in /etc/fail2ban/filter.d/ and actions in /etc/fail2ban/action.d tailored for Centmin Mod's use of CSF Firewall and it's Nginx vhost log paths.
    - This update adds a tools/fail2ban-register-vhost.sh script which runs on new Nginx vhost creation routines for centmin.sh menu option 2, 22 or nv or addons/acmetool.sh if fail2ban service is detected as running and has Centmin Mod's fail2ban implemented custom Nginx jail configuration files. This allows fail2ban monitor to register the new Nginx vhost's access and error log paths for monitoring.
    - Note, Centmin Mod itself won't install fail2ban, it's a separate install outlined at GitHub - centminmod/centminmod-fail2ban at 1.0 and where issues with fail2ban implementation can be reported at Issues · centminmod/centminmod-fail2ban

    Continue reading...

    130.00beta01 branch

    Support Centmin Mod


    If you find Centmin Mod useful, please help support Centmin Mod