gitea
dd7f8dd1a2
Dockerized Fail2Ban + dashboard for Nginx Proxy Manager. - Single-container image (fail2ban + Node.js + supervisord) - Pre-built NPM filters: badbot, http-errors, npm-probe, manual-bans - Web dashboard with live ban feed, log scanner, AbuseIPDB integration - Configurable via environment variables and .env file - Persistent volumes for config and ban history - Webhook support for ban event notifications - README, .gitignore, MIT license Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
48 lines
2.7 KiB
Plaintext
48 lines
2.7 KiB
Plaintext
# ── F2B Control Center — environment configuration ───────────────────────────
|
||
# Copy this file to .env and fill in your values.
|
||
# Only NPM_LOG_DIR is strictly required to get started.
|
||
# ─────────────────────────────────────────────────────────────────────────────
|
||
|
||
# ── Required ──────────────────────────────────────────────────────────────────
|
||
|
||
# Path to your Nginx Proxy Manager log directory on the host.
|
||
# This directory will be mounted read-only inside the container.
|
||
# Common paths:
|
||
# /opt/npm/data/logs
|
||
# /home/docker/NGINX/data/logs
|
||
# /docker/nginx-proxy-manager/data/logs
|
||
NPM_LOG_DIR=/opt/npm/data/logs
|
||
|
||
# ── Dashboard ─────────────────────────────────────────────────────────────────
|
||
|
||
# Port the dashboard listens on (host port when using network_mode: host)
|
||
DASHBOARD_PORT=4000
|
||
|
||
# ── AbuseIPDB integration (optional but recommended) ─────────────────────────
|
||
# Enables IP reputation lookups and auto-ban by abuse score.
|
||
# Free API keys available at https://www.abuseipdb.com/
|
||
ABUSEIPDB_API_KEY=
|
||
|
||
# Minimum AbuseIPDB confidence score (0–100) to trigger auto-ban
|
||
AUTOBAN_THRESHOLD=75
|
||
|
||
# ── Log scanning ──────────────────────────────────────────────────────────────
|
||
|
||
# Default lookback window when scanning nginx logs (days)
|
||
DEFAULT_LOOKBACK_DAYS=3
|
||
|
||
# Comma-separated CIDR subnets to skip during log scanning and banning.
|
||
# Include your LAN, Docker bridge, and any trusted networks.
|
||
SUBNETS_TO_IGNORE=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
|
||
|
||
# ── Optional integrations ─────────────────────────────────────────────────────
|
||
|
||
# Webhook URL: receives a POST request on every manual ban action.
|
||
# Payload: { "action": "ban", "ip": "1.2.3.4", "jail": "manual-bans", "ts": "..." }
|
||
# Examples: Discord webhook, n8n, Slack, custom endpoint
|
||
WEBHOOK_URL=
|
||
|
||
# Path to a custom script to run after whitelist changes (e.g. Cloudflare sync).
|
||
# The script is executed as a background fire-and-forget process.
|
||
# CF_SYNC=/usr/local/bin/cloudflare-whitelist-sync.sh
|