Add Ubuntu LXC security baseline bootstrap with fail2ban, npm and codex

2026-05-10 19:59:38 +00:00
commit 7b1e511b5e
3 changed files with 156 additions and 0 deletions
@@ -0,0 +1,18 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8 ::1
+bantime  = 1h
+findtime = 10m
+maxretry = 5
+backend  = systemd
+
+[sshd]
+enabled  = true
+port     = ssh
+logpath  = %(sshd_log)s
+maxretry = 5
+
+[sshd-ddos]
+enabled  = true
+port     = ssh
+logpath  = %(sshd_log)s
+maxretry = 3