From 61869049a0d6e4c3763fa362c9367c7a9c4004e6 Mon Sep 17 00:00:00 2001 From: Ruben van Staveren Date: Mon, 9 Jan 2023 15:17:38 +0100 Subject: [PATCH] Picky markdown... --- README.md | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/README.md b/README.md index 855545c..1a63a47 100644 --- a/README.md +++ b/README.md @@ -11,14 +11,14 @@ * Use the following for configuring uwsgi in rc.conf - sudo sysrc uwsgi\_enable="YES" - sudo sysrc uwsgi\_profiles="jail2ban\_pf" - sudo sysrc uwsgi\_jail2ban\_pf\_flags="-L -M --uid \_jail2ban --python-path /opt/jail2ban-pf --wsgi-file /opt/jail2ban-pf/wsgi.py --stats 127.0.0.1:9191 --socket 127.0.0.1:3031 --chdir /var/empty --callable app --manage-script-name" + sudo sysrc uwsgi\_enable="YES" + sudo sysrc uwsgi\_profiles="jail2ban\_pf" + sudo sysrc uwsgi\_jail2ban\_pf\_flags="-L -M --uid \_jail2ban --python-path /opt/jail2ban-pf --wsgi-file /opt/jail2ban-pf/wsgi.py --stats 127.0.0.1:9191 --socket 127.0.0.1:3031 --chdir /var/empty --callable app --manage-script-name" * Configure /instance/config.py - SECRET\_KEY = os.urandom(32).hex() - AUTHFILE = '/usr/local/etc/jail2ban-pf-users.txt' + SECRET\_KEY = os.urandom(32).hex() + AUTHFILE = '/usr/local/etc/jail2ban-pf-users.txt' * Configure a nginx upstream and vhost @@ -45,12 +45,12 @@ _Of course you can listen on ipv4/ipv6 but you want to protect these addresses f * Place anchors in pf for jail2ban to use - anchor "f2b/*" - anchor f2b-jail { - anchor "jail1_fqdn" to { , , } - anchor "jail2_fqdn" to { , , } - anchor "jail3_fqdn" to { , , } - } + anchor "f2b/*" + anchor f2b-jail { + anchor "jail1_fqdn" to { , , } + anchor "jail2_fqdn" to { , , } + anchor "jail3_fqdn" to { , , } + } Having seperate anchors per jail makes it possible to have fine grained blocking: Something that is harmful to jail2 might be perfectly legit for jail2.