Перейти к содержимому
0 Голосов

Изменения документа Proxy

Редактировал(а) Anton Krivchenkov 31.03.2026 00:03
От версии 5.1
отредактировано Anton Krivchenkov
на 02.03.2026 11:03
Изменить комментарий: К данной версии нет комментариев
К версии 7.1
отредактировано Anton Krivchenkov
на 02.03.2026 17:03
Изменить комментарий: К данной версии нет комментариев

Сводка

Подробности

Свойства страницы
Содержимое
... ... @@ -62,57 +62,58 @@
62 62   sudo ufw allow OpenSSH
63 63   sudo ufw enable
64 64  
65 -
66 -`sudo apt install fail2ban -y
67 -sudo bash -c 'cat > /etc/fail2ban/jail.local << "JAIL"
68 -[DEFAULT]
69 -bantime = 24h
70 -findtime = 10m
71 -maxretry = 3
65 +### fail2ban
72 72  
73 -bantime.increment = true
74 -bantime.factor = 2
75 -bantime.maxtime = 4w
67 + sudo apt install fail2ban -y
68 + sudo bash -c 'cat > /etc/fail2ban/jail.local << "JAIL"
69 + [DEFAULT]
70 + bantime = 24h
71 + findtime = 10m
72 + maxretry = 3
73 +
74 + bantime.increment = true
75 + bantime.factor = 2
76 + bantime.maxtime = 4w
77 +
78 + banaction = iptables-multiport
79 + banaction_allports = iptables-allports
80 +
81 + ignoreip = 127.0.0.1/8 ::1
82 +
83 + [sshd]
84 + enabled = true
85 + logpath = %(sshd_log)s
86 + backend = %(sshd_backend)s
87 + maxretry = 3
88 + bantime = 48h
89 + findtime = 15m
90 + mode = aggressive
91 +
92 + [sshd-ddos]
93 + enabled = true
94 + logpath = %(sshd_log)s
95 + backend = %(sshd_backend)s
96 + maxretry = 5
97 + bantime = 24h
98 + findtime = 30s
99 +
100 + [recidive]
101 + enabled = true
102 + logpath = /var/log/fail2ban.log
103 + maxretry = 3
104 + bantime = 4w
105 + findtime = 7d
106 + banaction = iptables-allports
107 + JAIL
108 + apt-get update
109 + apt-get install -y fail2ban
110 + systemctl enable --now fail2ban
111 + systemctl restart fail2ban
112 + echo "fail2ban настроен и запущен"
113 + '
114 + systemctl enable fail2ban
115 + systemctl restart fail2ban
76 76  
77 -banaction = iptables-multiport
78 -banaction_allports = iptables-allports
79 -
80 -ignoreip = 127.0.0.1/8 ::1
81 -
82 -[sshd]
83 -enabled = true
84 -logpath = %(sshd_log)s
85 -backend = %(sshd_backend)s
86 -maxretry = 3
87 -bantime = 48h
88 -findtime = 15m
89 -mode = aggressive
90 -
91 -[sshd-ddos]
92 -enabled = true
93 -logpath = %(sshd_log)s
94 -backend = %(sshd_backend)s
95 -maxretry = 5
96 -bantime = 24h
97 -findtime = 30s
98 -
99 -[recidive]
100 -enabled = true
101 -logpath = /var/log/fail2ban.log
102 -maxretry = 3
103 -bantime = 4w
104 -findtime = 7d
105 -banaction = iptables-allports
106 -JAIL
107 -apt-get update
108 -apt-get install -y fail2ban
109 -systemctl enable --now fail2ban
110 -systemctl restart fail2ban
111 -echo "fail2ban настроен и запущен"
112 -'
113 -systemctl enable fail2ban
114 -systemctl restart fail2ban`
115 -
116 116  # ZSH
117 117  
118 118   sudo apt update && sudo apt install -y zsh git fonts-powerline curl && \
... ... @@ -160,4 +160,4 @@
160 160  ### lzd
161 161  
162 162   DIR=/usr/local/bin \
163 - bash -c 'curl -fsSL https://raw.githubusercontent.com/jesseduffield/lazydocker/master/scripts/install_update_linux.sh | bash && echo "alias lzd='\''lazydocker'\''" >> "$HOME/.zshrc"'
164 + curl -fsSL https://raw.githubusercontent.com/jesseduffield/lazydocker/master/scripts/install_update_linux.sh | sudo DIR=/usr/local/bin bash && echo "alias lzd='lazydocker'" >> "$HOME/.zshrc"