feat: Add ban duration for the failtoban plugin

jprorama · Jan 24, 2025 · 4c83ae0 · 4c83ae0
1 parent a4e4729
commit 4c83ae0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/group_vars/all b/group_vars/all
@@ -353,6 +353,7 @@
   sshpiper_version: "feat-routing-by-group"
   sshpiper_dest_dir: "/opt/sshpiper"
   sshpiper_bin_dir: "{{ sshpiper_dest_dir }}/out"
+  sshpiper_bantime: 1200
 
 # http_proxy
   enable_http_proxy: false

diff --git a/roles/ssh_proxy/templates/sshpiperd.service.j2 b/roles/ssh_proxy/templates/sshpiperd.service.j2
@@ -4,7 +4,7 @@ After=network.target
 
 [Service]
 Type=simple
-ExecStart= {{ sshpiper_bin_dir }}/sshpiperd -p 22 --log-level=trace {{ sshpiper_bin_dir }}/yaml --config {{ sshpiper_dest_dir }}/sshpiperd.yaml --no-check-perm -- {{ sshpiper_bin_dir }}/failtoban
+ExecStart= {{ sshpiper_bin_dir }}/sshpiperd -p 22 --log-level=trace {{ sshpiper_bin_dir }}/yaml --config {{ sshpiper_dest_dir }}/sshpiperd.yaml --no-check-perm -- {{ sshpiper_bin_dir }}/failtoban --ban-duration {{ sshpiper_bantime }}
 Restart=on-failure
 User=root