jmhbnz/raspi-k3s
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added fail2ban setup to post-install.txt.

Browse Source
This commit is contained in:
James Blair
2020-01-08 15:23:04 +13:00
parent b6cf537ebc
commit abdf28004c
1 changed files with 41 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
post-install.txt
View File

@ -5,3 +5,44 @@ if [ "${PIPESTATUS[0]}" -eq 0 ]; then
else else
echo "FAILED !" echo "FAILED !"
fi fi
echo "Restarting ssh daemon..."
eval chroot /rootfs /user/bin/systemctl restart ssh 2>&1 | output_filter
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
echo "OK"
else
echo "FAILED !"
fi
echo "Ensure fail2ban service is enabled..."
eval chroot /rootfs /user/bin/systemctl enable fail2ban 2>&1 | output_filter
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
echo "OK"
else
echo "FAILED !"
fi
echo "Configure fail2ban ssh jail..."
eval chroot /rootfs /user/bin/touch /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo '[ssh]' >> /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo 'enabled=true' >> /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo 'port=2122' >> /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo 'filter=sshd' >> /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo 'logpath=/var/log/auth.log' >> /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo 'bantime=1800' >> /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo 'banaction=iptables-allports' >> /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo 'findtime=900' >> /etc/fail2ban/jail.local 2>&1 | output_filter
eval chroot /rootfs /user/bin/echo 'maxretry=3' >> /etc/fail2ban/jail.local 2>&1 | output_filter
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
echo "OK"
else
echo "FAILED !"
fi
echo "Restart fail2ban service..."
eval chroot /rootfs /user/bin/systemctl restart fail2ban 2>&1 | output_filter
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
echo "OK"
else
echo "FAILED !"
fi