openclaw
0784a11c19
Some checks failed
Weekly Translation Workflow / translate (push) Has been cancelled
- Replace 'docker run -p 80:80' with '--network host' for certbot standalone HTTP-01 to avoid timeout in environments where Docker NAT port-publish breaks LE inbound traffic but host port 80 is reachable. - Applies to kejilion.sh (all locale variants) and auto_cert_renewal.sh. - README install command points to this Gitea mirror.
63 lines
918 B
Plaintext
63 lines
918 B
Plaintext
[fail2ban-nginx-cc]
|
|
|
|
enabled = true
|
|
filter = fail2ban-nginx-cc
|
|
chain = DOCKER-USER
|
|
port = http,https
|
|
action = cloudflare
|
|
logpath = /home/web/log/nginx/access.log
|
|
maxretry = 3
|
|
bantime = 3600
|
|
findtime = 3600
|
|
ignoreip = 192.168.0.1/24
|
|
|
|
|
|
|
|
[nginx-http-auth]
|
|
|
|
enabled = true
|
|
chain = DOCKER-USER
|
|
mode = fallback
|
|
port = http,https
|
|
logpath = /home/web/log/nginx/error.log
|
|
|
|
|
|
|
|
[nginx-limit-req]
|
|
|
|
enabled = true
|
|
chain = DOCKER-USER
|
|
port = http,https
|
|
action = cloudflare
|
|
logpath = /home/web/log/nginx/error.log
|
|
|
|
|
|
|
|
[nginx-botsearch]
|
|
|
|
enabled = true
|
|
chain = DOCKER-USER
|
|
port = http,https
|
|
action = cloudflare
|
|
logpath = /home/web/log/nginx/error.log
|
|
|
|
|
|
|
|
[nginx-bad-request]
|
|
|
|
enabled = true
|
|
chain = DOCKER-USER
|
|
port = http,https
|
|
action = cloudflare
|
|
logpath = /home/web/log/nginx/access.log
|
|
|
|
|
|
|
|
[php-url-fopen]
|
|
|
|
enabled = true
|
|
chain = DOCKER-USER
|
|
port = http,https
|
|
action = cloudflare
|
|
logpath = /home/web/log/nginx/access.log
|