Dockerized Fail2Ban + dashboard for Nginx Proxy Manager. - Single-container image (fail2ban + Node.js + supervisord) - Pre-built NPM filters: badbot, http-errors, npm-probe, manual-bans - Web dashboard with live ban feed, log scanner, AbuseIPDB integration - Configurable via environment variables and .env file - Persistent volumes for config and ban history - Webhook support for ban event notifications - README, .gitignore, MIT license Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
55 lines
1.9 KiB
Plaintext
55 lines
1.9 KiB
Plaintext
# ── supervisord configuration for F2B Control Center ─────────────────────────
|
|
# Manages two processes inside the container:
|
|
# 1. fail2ban — the banning daemon (starts first)
|
|
# 2. dashboard — the Node.js web interface
|
|
# ─────────────────────────────────────────────────────────────────────────────
|
|
|
|
[supervisord]
|
|
nodaemon=true
|
|
logfile=/dev/null
|
|
logfile_maxbytes=0
|
|
pidfile=/var/run/supervisord.pid
|
|
loglevel=info
|
|
|
|
[unix_http_server]
|
|
file=/var/run/supervisor.sock
|
|
chmod=0700
|
|
|
|
[supervisorctl]
|
|
serverurl=unix:///var/run/supervisor.sock
|
|
|
|
[rpcinterface:supervisor]
|
|
supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
|
|
|
|
# ── fail2ban ──────────────────────────────────────────────────────────────────
|
|
[program:fail2ban]
|
|
command=/usr/bin/fail2ban-server -xf start
|
|
autostart=true
|
|
autorestart=true
|
|
startretries=3
|
|
startsecs=3
|
|
stopwaitsecs=10
|
|
# -x: remove stale socket before starting
|
|
# -f: run in foreground (required for supervisor)
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
priority=10
|
|
|
|
# ── dashboard ─────────────────────────────────────────────────────────────────
|
|
[program:dashboard]
|
|
command=/usr/bin/node /app/server.js
|
|
directory=/app
|
|
autostart=true
|
|
autorestart=true
|
|
startretries=5
|
|
startsecs=3
|
|
stopwaitsecs=10
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
priority=20
|
|
environment=NODE_ENV="production"
|